Wormhole: Secure Send

Staticflux Inc.

Privacy Policy

Last updated November 5, 2026

Wormhole doesn't collect, store, or sell any information about you. This page explains what happens to your data when you use it.

What we collect

Nothing. Wormhole has no accounts, analytics, advertising, crash reporting, or tracking of any kind. Staticflux Inc. receives no data from the app.

How transfers work

When you send or receive, the two devices use a short one-time code to agree on an encryption key (a password-authenticated key exchange called SPAKE2). Files and text are then encrypted end to end with that key. Only the two devices taking part in a transfer can read what's sent.

To find each other, the devices connect to two kinds of server:

• A mailbox server passes short encrypted setup messages between the devices. By default this is relay.magic-wormhole.io, run by the open-source magic-wormhole project.
• A transit relay forwards the encrypted transfer when the devices can't connect directly. By default this is transit.magic-wormhole.io, also run by the magic-wormhole project.

These servers see your device's IP address and the timing and size of the encrypted traffic, as any internet server does. They never see the encryption key, the code's words, file names, or contents. You can choose different servers in Settings, including ones you run yourself.

Direct connections

When Direct Connections is on (the default), the devices try to connect straight to each other on the same network, which is faster. The other device then sees your device's IP address. Turn it off in Settings to send everything through the relay instead, so the other device never learns your address.

Data on your device

• Received files are saved where you choose: Wormhole's own folder in the Files app (your Downloads folder on a Mac), or any folder you pick.
• The History tab keeps a list of past transfers on your device only. You can delete items, or turn off Save History in Settings.
• Settings are stored on your device. Nothing is synced to us.

Permissions

• Camera: used only to scan QR codes. Images are processed on device and never stored or sent.
• Local network: used to connect directly to a nearby device.
• Photos: used to pick photos and videos to send, and, only if you ask, to add received ones to your library.
• Clipboard: Wormhole checks only what kind of content is on the clipboard, to offer to send it. It reads the contents only when you tap Paste.

Children

Wormhole doesn't knowingly collect information from anyone, including children under 13.

Changes

If this policy changes, the new version will be posted here with a new date.

Contact

Questions about privacy: apps@sfx.dev.