Privacy Policy

Last updated: 3 November 2026

Jumpa helps you move photos and videos from your iPhone to your computer. This policy explains, in plain language, what happens to your data. The operator is {{LEGAL_ENTITY}} ("we"), contact: support@jumpaapp.com.

The short version

• No account. No ads. No cross-app tracking. The only analytics are anonymous purchase statistics (see "Purchases and analytics").
• Your photos and videos go directly from your iPhone to your computer's browser, encrypted. They are never uploaded to or stored on our servers.
• Nothing is deleted from your iPhone unless you explicitly confirm it, and only for files your computer confirmed it received intact.

What stays on your devices

• Photos & videos: the app reads only the items you choose. To send them it makes a temporary copy inside the app, which is removed when the transfer ends.
• Camera: used only to scan the QR code shown on your computer. No pictures or video from the camera are saved or sent.
• Photos library (delete step): if you choose "Transfer & Delete", the app asks for permission and deletes only the exact items that were verified on your computer, after a separate confirmation from you. If iCloud Photos is on, deleting also removes them from your other devices. Deleted items remain in "Recently Deleted" for the period set by iOS; we never empty it.
• Free transfers counter: a small number stored in your device Keychain (it is not synced to iCloud and not sent to us).
• Settings flags (for example, "onboarding shown") are stored on the device.

What our connection service sees

To pair your iPhone with your computer's browser we run a small connection ("signaling") service on Cloudflare Workers. It handles only short setup messages needed to start a direct connection. It processes:

• A random session ID and one-time tokens (stored only as hashes) that exist for a few minutes and are erased when pairing ends or expires.
• Your IP address, transiently, to apply rate limits against abuse (used as a hashed key in memory; not written to a database by us).

It never receives file contents, file names or photo metadata, and we do not log them. Our hosting provider (Cloudflare) may process standard technical request data (such as IP address) to operate and protect its network, under its own privacy policy.

STUN servers

To help two devices find each other on the network, the app and the website contact public STUN servers (currently operated by Cloudflare and Google). These servers can see the IP address and port of the device that contacts them. We do not use TURN relays: file data does not pass through relays. If this ever changes we will update this policy before doing so.

Direct connection

Your iPhone and your computer connect to each other directly, so each device can see the other's network address. This is inherent to a direct connection between two devices that you control and pair yourself. The connection is encrypted (DTLS).

Purchases and analytics

The optional Lifetime Access purchase is processed by Apple. We do not receive your payment details or Apple ID. To understand revenue and how many customers we have, the app uses RevenueCat, a purchase-analytics provider acting on our behalf. RevenueCat receives purchase events (what was bought and when) together with a random anonymous app user ID generated on your device, plus technical data such as the IP address, device model, OS version and country. It does not receive your name, email, photos, file names or file contents. We do not use this data for advertising or to track you across other apps. See RevenueCat's privacy policy.

The app works the same if you decline to buy; there is no way to opt out of the anonymous purchase statistics apart from not purchasing, because they are needed to operate the purchase. Apple also gives us aggregate, anonymous statistics (such as downloads) through App Store Connect.

Website

The receiver website does not use cookies, advertising or third-party trackers. It runs in your browser and writes files to the folder you choose (or downloads them, depending on your browser).

Retention, children and your rights

We keep no personal data about you beyond the transient items above, so there is normally nothing to access, correct or delete. If you believe we hold data about you, contact us and we will respond within a reasonable time. Jumpa is not directed at children under 13.

Changes

If this policy changes we will update the date above and, where required, inform you in the app.