HashPhotos Transfer Privacy Policy

Last updated: October 8, 2026

kobaltlab Inc. ("we", "us") makes HashPhotos Transfer for macOS and Windows, published as beyondF. HashPhotos Transfer moves photos and videos over your local network between a Mac or Windows PC and HashPhotos on iPhone or iPad, or another computer running HashPhotos Transfer.

This policy explains what information the app handles, where it goes, and the choices you have. It covers the macOS app and the Windows app, whether installed from the Microsoft Store or downloaded from this website. HashPhotos for iPhone and iPad has its own Privacy Policy.

In Short

• Your photos and videos go directly from one of your devices to another over your local network. They never pass through our servers, and we never see them.
• There is no account, no advertising and no usage analytics. We don't sell, rent or share information about you.
• What the app keeps (settings, trusted devices, logs) stays on your computer.
• The Mac app sends anonymous crash reports, which you can turn off. The Windows app sends none.

Photos and Videos You Transfer

The app reads only the files you choose to send, and saves the files you receive in the folder you choose. A transfer goes straight to the device you picked on the same local network (Wi-Fi or Ethernet), never over the internet, and only once the receiving device has allowed it (or trusted the sender before).

Along with each file the app sends what the other device needs to file it: the file name, whether it is a photo or a video, its capture date and time, the album or folder names when you keep the folder structure, and a short identifier that keeps duplicate names consistent.

To name and sort received files, the app reads their metadata on your computer: the capture date, the camera make and model, and the dimensions. This information doesn't leave your computer.

Information Shared on Your Local Network

So that your devices can find each other, the app announces itself on your local network (Bonjour, also called mDNS) with:

• your computer's name, as the app shows it (under This Mac on a Mac, This Device on Windows)
• the kind of device (Mac or Windows PC, laptop or desktop)
• a random device ID created by the app
• a 5-character code derived from the app's identity key, which the other device shows so you can check you are connecting to the right one
• the operating system version and the app's transfer protocol version

Other devices on the same local network can see this announcement, as they can see printers or other shared devices. The app also watches for older versions of HashPhotos on the network, only to suggest updating them; it never connects to them.

When another device sends to your computer, the app shows its name and code and asks you to allow it. If you choose Trust This Device, the app stores that device's ID, name, kind, code and public key on your computer, so it can send without asking next time. You can remove trusted devices at any time in Settings > Devices.

Security

Before every transfer, each device proves its identity with its own key, so a device can't pretend to be one you trust. The files themselves are sent without encryption, so someone who can watch the traffic on your local network could see them. Use the app on networks you trust, such as your home or office network.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Information Stored on Your Computer

• Settings such as the save location, the naming options and the window position.
• Trusted devices (see above).
• The app's identity key, which proves this computer's identity to your other devices. On Windows it is protected with Windows Data Protection for your user account; on a Mac it is kept in a file only your user account can read.
• Logs: the Windows app keeps a record of each transfer for 7 days, including device names, device IDs, network addresses and the number of items, to help diagnose problems. The Mac app writes similar messages to the macOS system log. Logs are never sent anywhere by the app. If you report a problem, you may choose to send them to us (Windows: Settings > General > Open Log Folder).

We don't receive any of this information. To remove it, uninstall the app; for the Windows app also delete the %LOCALAPPDATA%\HashPhotos folder if it is there, and on a Mac delete ~/Library/Application Support/HashPhotos and the app's preferences.

Crash Reports

When the Mac app crashes, it sends an anonymous crash report through Firebase Crashlytics, a service from Google: the error and where in the app it happened, the transfer step that was under way, the Mac model, the macOS version, the app version, and a random installation identifier that lets us count how many installations a problem affects. Crash reports never include your photos, file names or device names. You can turn them off in Settings > General > Share Crash Reports.

The Windows app uses no crash reporting or analytics service. Windows itself may send error reports to Microsoft according to your Windows settings and the Microsoft Privacy Statement. If you installed the app from the Microsoft Store, Microsoft shares information from these error reports with us, such as where in the app the error happened and the app and Windows versions, so we can fix problems.

Update Checks

The Mac app and the Windows app downloaded from this website check for a new version at launch and once a day by downloading a small public file from our website (https://www.hashphotos.app/update/hashphotos_transfer.json). The request contains no information about you, your photos or your devices. As with any web request, our hosting provider, Amazon Web Services, receives your IP address and standard request details. The Windows app installed from the Microsoft Store doesn't make this check; the Store delivers its updates.

Permissions

• Local network: to find your devices and to receive transfers (on Windows, an inbound rule in Windows Firewall for private networks; on a Mac, the Local Network permission).
• Notifications (optional): to tell you a transfer has finished while the app is in the background.
• Files and folders: only the files you choose to send and the folder where you save received files.

Service Providers

• Firebase Crashlytics (Google), Mac app only: crash reports, as described above. See the Firebase privacy information.
• Amazon Web Services: hosts this website, the downloads and the update file.
• Microsoft Store: if you install the Windows app from the Store, Microsoft handles its distribution and updates under the Microsoft Privacy Statement.

These providers don't have access to your photos or the content of your transfers.

Children's Privacy

The app doesn't collect personal information from anyone, including children under the age of 13.

Changes to This Privacy Policy

We may update this policy from time to time. We will post any changes on this page and update the date above. Changes are effective as soon as they are posted.

Contact Us

If you have any questions or suggestions about this policy, contact us at hello@hashphotos.app.