Not "we promise not to look". There is no readable copy for anyone to look at — not us, not an integration, not an automated classifier.
“The only people who see the file are the ones you sent it to.”
For individuals and professionals sending personal, medical, legal or confidential documents who do not want them processed by anyone.
No AI classification, no profiling, no advertising model. Encrypted content cannot be analysed.
Encryption happens before the upload begins, with keys derived locally.
Public links expire within 24 hours at most and can be revoked at any moment.
We keep only what is needed to run the service, and we publish exactly what that is.
Browser, desktop and mobile apps, with an encrypted local cache for offline access.
Deleting removes the ciphertext; with no key retained, there is nothing left to reconstruct.
When a product costs nothing and shows advertising, the economics require knowing something about users and content. That is not a conspiracy; it is a business model. A paid, zero-knowledge service is aligned differently: the operator's ability to profit from your content is removed at the architectural level.
Passports, medical results, tax returns and contracts are routinely emailed as attachments or dropped into free transfer sites. Each copy is permanent and readable. A short-lived, passphrase-protected, encrypted link is both easier to control and impossible for the host to read.
Content confidentiality is only half the story: retention matters too. Links expire on their own, deletion is real, and the metadata we hold is documented rather than described vaguely.
No, on both counts. There is no advertising business here, and encrypted content cannot be analysed.
Storage regions and subprocessors are published so you can check before you send anything.
No. Files are encrypted on your device with XChaCha20-Poly1305 before the upload starts, using keys derived locally with Argon2id. Our servers hold ciphertext only, so there is no preview, no scanning and no staff view of your transfer.
No. They open the link in any browser, type the passphrase you shared separately, and the file is decrypted locally on their machine. Nothing to install, nothing to sign up for.
Public share links always expire within 24 hours at most, and you can make them shorter, limit the number of views, or revoke them instantly. Expiry is enforced by the system, not by a reminder.
Uploads are chunked, resumable and verified after upload, so multi-gigabyte transfers survive a dropped connection, a closed laptop or a hotel network. You resume instead of starting again.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can test a real client hand-off before paying anything.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to store offline. That is the same property that keeps anyone else, including us, out of your account.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
