Exfil privacy policy
Developed by Jonathan Ng. Updated November 5, 2026.
Exfil has no account, no servers of its own, no advertising and no analytics. I do not collect, receive or sell any personal information, and nothing in the app tracks you across other apps or websites.
The photos and videos you choose are copied directly from your iPhone, iPad or Mac to the phone you connect, over your local network or, on a Mac, a USB cable. They are not sent anywhere else. Exfil reads your Photos library only to fetch the originals you pick and changes nothing in it, and it uses Local Network access only to reach that phone. What happens to a file once it’s on the phone, including any cloud backup, is up to the phone and the services on it; Exfil can’t see that.
Wi-Fi connections made with a Wireless debugging pairing code are encrypted. The older adb tcpip connection, for phones without Wireless debugging, is not encrypted, so use it only on a network you trust and turn it off when you’re done.
While a file waits to send, Exfil keeps a working copy inside the app and removes it once the phone confirms the file is in its library, keeping a small thumbnail for the app’s history. A preview downloads the file from the phone to temporary storage. Your settings, the phone’s address and the key that lets the phone recognize your device stay on your device.
Your transfer history and free-transfer count sync between your own devices through the private CloudKit database of your iCloud account. File names, folder paths, SHA-256 hashes, the phone’s serial number, library references, media types and connection types are end-to-end encrypted. File sizes, transfer times, dates and cleanup status sit in the same private database without that extra encryption, and the free-transfer count holds only random identifiers and a number. I cannot read any of it; I only see aggregate request counts in Apple’s CloudKit Console. Apple hosts iCloud under its own privacy policy.
You can turn history sync off in Settings ▸ iCloud, which removes this device’s history from iCloud. The free-transfer count syncs either way.
The one-time Exfil Unlock purchase is processed by Apple through the App Store. The app checks the transaction with StoreKit to unlock the purchase. I do not receive your payment details.
Deleting the app removes its transfer history and settings from that device. Copies on the phone stay there until you delete them from Exfil or on the phone. Data in iCloud remains in your account until you delete it from iCloud settings.
Shared terms
These apps are developed by Jonathan Ng. None of them has a user account, advertising, or a third-party analytics or tracking SDK. I do not sell personal information or use it for advertising or cross-app tracking.
Unless an app’s own policy below says otherwise, everything you enter stays on your device, and when an app offers iCloud sync it uses the private part of your own iCloud account, which only you can read.
Purchases, including one-time unlocks and tips, are processed by Apple through the App Store. The apps verify the transaction with StoreKit; I never receive your payment details.
If you email support, I receive the information you choose to send and use it only to respond. You can remove an app’s local data by deleting the app.
For privacy questions or requests, contact jon@jonathanng.com. This page is updated if an app’s data practices change.