Privacy

Toss connects your devices. Your files belong to you.

Updated September 11, 2026

Files and credentials

Files, previews, search indexes, transfer history, and saved computer details are stored on your devices. Computer login credentials are saved in your device’s Keychain or protected credential storage. They are not stored by the Toss connection service.

Remote file transfers and terminal sessions use encrypted SSH connections between your phone and computer. The connection service forwards that encrypted traffic; it cannot read your files, filenames, terminal commands, or SSH password.

Connection service

For remote access, Toss stores your invitation name, random account and device identifiers, computer and phone labels, hashed access tokens, pairing dates, last connection times, and data-usage counters. Phone platform and app version may also be included. These records authorize your devices, support revocation, and enforce the beta’s usage limits.

Network addresses are used to establish connections. Local route hints are held in memory so Toss can use a faster connection on the same network. The service runs on DigitalOcean in the United States.

Service records remain while your access is active. You can revoke paired phones in desktop Toss or contact us to delete your service registration. Recovery backups may retain earlier records for up to 30 days.

Browser and local permissions

Toss uses Apple’s WebKit browser. Websites you visit receive normal browser requests and may set their own cookies or collect data under their own policies. Downloads stay in Toss until you move or remove them.

Camera access is used to scan pairing codes. Photos and files are imported when you choose them. Local network access finds and connects to nearby computers. Notifications are optional.

Beta feedback

TestFlight is provided by Apple and may share beta feedback, screenshots, crash reports, and usage information with us. If you email support, we receive the address and information you send. Please do not include passwords, setup keys, or private files.

Toss does not sell personal data or use advertising trackers. On-device performance diagnostics are not automatically uploaded to us.

Contact

Toss is operated by Daniel Davydov. For support, data-access requests, or deletion, email danieldavydov0@gmail.com.

Changes to this policy will appear here with an updated date.