AllSend — Privacy Policy

Effective date: November 13, 2026

In short

AllSend (package ID com.smokebot.allsend) sends files between nearby devices. It is published by R.A.L.L. Media (Ruslan Jafarov). The app does not create an account and does not ask for your email or a password. Files go directly from device to device over your local Wi-Fi network or Bluetooth. When the devices are not on a shared network, the file can be sent through our relay server, but only after it has been encrypted on your phone. The server cannot read it. The free version shows Google AdMob ads. Purchases go through the App Store or Google Play. The app does not contain analytics or crash-reporting tools.

Your files and local transfer

AllSend only accesses the photos, files or folders you pick yourself in the system picker. On a shared Wi-Fi network, the file is sent directly to the other device over the local network and is not uploaded anywhere. A computer without the app can download the file from a temporary local link (shown as a QR code) that works only on that network. The QR code contains only the link, not the file. The link stops working after the download or when you cancel.

Without a shared network or internet, a small batch (up to 15 MB) can be sent directly over Bluetooth. Received files are saved in the AllSend folder on the receiving device.

Encrypted transfer through the server

When the devices are not on a shared network, or when you choose to send through the server, AllSend encrypts the files on your phone (AES-GCM) before uploading them to our relay server allsend.smokebot.pro. The key is only in the part of the link after #. Browsers and the app do not send that part to the server, so the server never receives the key. File names and contents are inside the encrypted data.

The server stores only the encrypted copy, and only temporarily. It is deleted when the download finishes, when the sender cancels, or after it has sat idle for 10 minutes (files up to 500 MB) or 6 hours (larger files), whichever comes first. The server has no user accounts.

To deliver the transfer, the server receives the encrypted data, the number and sizes of the files (needed to apply the size limits) and normal connection data: IP address, time, the requested address with its random link token (without the key) and the browser or app user agent. The web server keeps this connection data in its logs for up to 14 days for security and troubleshooting, and then deletes it. Before choosing this route, the app also checks that the server is reachable.

Anyone who has the full link, including the part after #, can decrypt the file. Share the link only with the person you want to receive it.

Permissions and nearby devices

Local network / Nearby Wi-Fi devices and Bluetooth are used only to find other AllSend devices and transfer files. On Android these permissions are declared as not used to determine location. On Android 11 and older, the system requires the location permission for Wi-Fi and Bluetooth scanning. AllSend does not read or store your location. Notifications on Android are used to show an incoming transfer.

While AllSend is open, it announces itself on the local network (mDNS / Bonjour) and over Bluetooth, so nearby AllSend devices can find it. This announcement contains the device name you set, a random ID created for this installation, a short session code and the local address and port. Other devices on the same network or nearby can see it. The random ID is not taken from a serial number, the advertising ID or another hardware identifier.

Advertising

The free version shows a banner on the home screen and, after a successful send or receive, at most one full-screen ad for that transfer. A failed ad never blocks a transfer. AllSend Pro has no ads.

Where the law requires it (for example in the European Union, the United Kingdom and Switzerland), the app shows Google’s consent form (User Messaging Platform, UMP). Ads are requested only if consent allows it. If the consent check fails, no ad is requested. When required, the form can be reopened in Settings → “Ad choices”.

The app does not use Apple’s App Tracking Transparency (ATT) prompt and does not read the advertising identifier itself.

Google AdMob may use the advertising identifier, technical device data and the IP address to show and measure ads, in accordance with Google’s Privacy Policy. Your files are never shared with advertisers.

Purchases

AllSend Pro (monthly or yearly subscription, or the earlier one-time purchase) is sold through the App Store on iPhone and Google Play on Android. Apple or Google processes the payment. The developer does not receive your name, payment card or other payment details. The app only asks the store whether a purchase is active.

The app contains code that could send a purchase token or a signed receipt (not your payment details) to the developer’s server to confirm that a subscription is valid. This server check is not enabled in the current version, so no purchase token is sent to us today.

No account and no analytics

The app does not create an account. It does not use analytics, Firebase or crash-reporting SDKs. We do not sell personal data.

Data stored on your device

On your device the app stores the device name you set, the random installation ID, your transfer history (file names, sizes, the other device’s name, direction, status and time), received files, settings and a note of an earlier one-time Pro purchase. This data stays on the device and is not sent to us.

Deleting your data

You can delete received files in the app or in your device’s file manager. Deleting the app removes its data from the device. Encrypted copies on the server are deleted automatically, as described above.

Your rights

Depending on where you live (for example under the GDPR), you may have the right to access, correct or delete personal data and to object to processing. The only personal data we may hold is the short-lived connection data of the relay server. To make a request, write to support@rall-media.com. You can change your ad consent in the app as described above.

Children

The app is not directed at children under 13. It does not create accounts. The free version may show ads via Google AdMob.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new effective date.

Contact

R.A.L.L. Media (Ruslan Jafarov). Questions about privacy: support@rall-media.com. The Terms of Use are here: AllSend — Terms of Use.