Nhako Beam privacy notice

Last updated 3 November 2026. This covers the Nhako Beam apps. The website has its own privacy notice.

The short version

Your files go directly between your own devices. They are never uploaded to us or stored by anyone in between. Nhako Beam has no accounts and no analytics, and we run no server for it, so we hold no personal data about you from using the app.

What stays on your device

Your device name, your device key, the devices you trust, your settings and your transfer history are kept on the device itself. The app also keeps a log file there to help find problems. It only leaves your device if you choose Copy diagnostics and paste it somewhere yourself. Uninstalling the app or clearing its data removes these.

What the app contacts, and why

• Other devices on your network. To find nearby devices, the app announces itself on your local network. You can turn this off. Device names are only sent inside an encrypted connection.
• Your other devices. Files, folders, text and links travel between the two devices, encrypted end to end. Each device learns the other's network address, as with any direct connection.
• A relay and an address lookup server. So devices can reach each other, the app by default uses free public servers run by n0, the makers of iroh, a separate company. They see the device's public key and network address. A relay only passes encrypted bytes along and cannot read your files. You can point the app at your own servers instead. n0 handles what it sees under its own terms.
• GitHub. At most once a day the app asks GitHub's public list of releases whether there is a new version. Nothing about you or your devices is sent, though GitHub sees the network address the request comes from, as with any web page. It never downloads anything by itself. You can turn this off in Settings, under About.

Downloading the app from GitHub is covered by GitHub's own privacy statement. The Android builds we publish do not include push wake-up, so they do not use Firebase.

Android and desktop permissions

On Android the app asks for what it needs to work: network access, notifications, running in the background so transfers keep going, starting when the phone starts so it can receive, the camera only to scan a pairing QR code, and access to the files you choose to send or receive. You can refuse the optional ones. Pictures from the camera are not saved or sent.

Children

The app does not ask for anyone's age or collect anything from them. A parent or guardian should decide whether a child uses it.

Your choices and rights

Since we hold no personal data from the app, there is nothing for us to give you or delete. If you write to us about it, for example by email or in a GitHub issue, we handle what you send as the website notice explains, including your rights under Malaysia's Personal Data Protection Act 2010.

Changes and contact

If what the app does changes, this notice changes with it, and the date above moves. Questions go to nhako.root@gmail.com.

Ringkasan dalam Bahasa Melayu