Effective date: March 7, 2026 · Last updated: March 7, 2026
KvikDrop is operated by Vestar Digital ("we", "us", "our"). We operate the KvikDrop mobile application (iOS and Android), the KvikDrop web application at kvikdrop.com, and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices.
When you create an account you provide your phone number. We use Firebase Authentication to verify your number via a one-time SMS code. We store:
To enforce free-tier limits and provide the Service we store minimal usage metadata in your user profile:
When you initiate a file transfer, a short-lived session record is created in our database to allow the receiving device to connect. This record contains:
Session records are automatically deleted within 3 minutes and cannot be used to reconstruct transferred files.
If you subscribe to KvikDrop Premium, payment processing is handled entirely by the platform store (Apple App Store, Google Play) or by our subscription partner RevenueCat. We do not collect or store credit card numbers, bank details, or billing addresses. We receive only:
| Purpose | Data used |
|---|---|
| Verify your identity & secure your account | Phone number, SMS verification code |
| Establish peer-to-peer connections | Temporary session data |
| Enforce free-tier transfer limits | Daily transfer count |
| Enable trusted-device quick-send | Device name, type, public key |
| Manage your Premium subscription | Subscription status via RevenueCat |
| Provide customer support | Phone number, account metadata |
Every file transfer in KvikDrop is protected by strong cryptography:
Encryption keys exist only in device memory during the transfer and are discarded afterward. We have zero access to your files at any point.
File data travels directly between the sender and receiver using WebRTC DataChannels. In most cases data does not pass through any server. When a direct connection is not possible (e.g., restrictive NAT), an encrypted TURN relay may be used. Even in this case, the relay sees only encrypted ciphertext and cannot decrypt your files.
KvikDrop requests device permissions only when needed:
| Permission | Why it's needed | Platforms |
|---|---|---|
| Camera | Scan QR codes for pairing | iOS, Android |
| Photo Library / Media | Select photos/videos to send; save received media | iOS, Android |
| NFC | Tap-to-pair with nearby devices | iOS, Android (where supported) |
| Local Network | Discover and connect to nearby devices | iOS |
| Notifications | Alert you to incoming transfer requests | iOS, Android |
The web application may request access to the file system (for picking and saving files) through standard browser APIs. No additional OS-level permissions are required.
We use a limited set of third-party services:
We do not use any advertising networks, analytics SDKs, or tracking pixels.
We protect your data through:
Our infrastructure is hosted on Google Cloud (Firebase) and Netlify, with servers primarily located in the United States and Europe. If you access the Service from outside these regions, your account information (phone number, usage metadata) may be transferred to and processed in these locations. File content is never transmitted to our servers, so it is not subject to international transfer.
Depending on your jurisdiction (including the EU/EEA under GDPR, California under CCPA, and other applicable laws), you may have the right to:
To exercise any of these rights, email us at privacy@kvikdrop.com. We will respond within 30 days.
You may request complete deletion of your account and all associated data by contacting privacy@kvikdrop.com. Upon verification of your identity, we will permanently delete your account data from our systems within 30 days.
KvikDrop is not intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete that data promptly.
The KvikDrop web application uses browser localStorage to persist your preferences (theme, trusted devices). We do not use tracking cookies, third-party cookies, or any advertising cookies. No data stored locally is transmitted to our servers except as described in this policy.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: