TachyonShare Privacy Policy Effective Date: 7 Oct 2026 Tachyon Bit Limited (“Tachyon Bit”, “we”, “us”, or “our”) provides the TachyonShare Android application (“TachyonShare” or the “App”) in Australia and New Zealand. This Privacy Policy explains how TachyonShare accesses, processes, collects, uses, stores, shares, and deletes information. 1. Privacy Summary TachyonShare is designed around direct device-to-device synchronization. Files, contacts, clipboard content, and transfer content move directly between devices selected by the user. Limited device and subscription metadata is sent to Tachyon Bit for activation, licence administration, verification, security, and support. Google Play independently processes account, billing, order, and purchase information under its own privacy policy. Transfer content is not received, decrypted, or stored by Tachyon Bit or Amazon Web Services (“AWS”). TachyonShare does not require users to create an account. We do not receive or store users’ names, telephone numbers, or email addresses through normal use of the App. We do not use advertising, behavioural analytics, or third-party tracking SDKs. We do not sell personal information or use it for targeted advertising. We collect limited device and subscription information for trial activation, licence management, subscription verification, fraud prevention, and service security. 2. Information Processed on Your Device 2.1 Files and Directories TachyonShare may request access to files and directories selected by the user. The App may process file names, paths, sizes, timestamps, content hashes, directory structures, and file contents to compare, transfer, synchronize, resume, and verify transfers. This information is processed on participating devices and is not uploaded to Tachyon Bit or AWS. 2.2 Contacts If you enable contact synchronization, TachyonShare may request permission to read and write contacts. Contact information may include names, phone numbers, email addresses, postal addresses, organisations, notes, and other contact fields. Contact information is processed locally and transferred only to the peer device selected by the user. Tachyon Bit and AWS do not receive or store it. 2.3 Clipboard Content If you use clipboard sharing, TachyonShare processes the clipboard content necessary to provide that feature. Clipboard content is transferred directly to the connected peer device and is not received or stored by Tachyon Bit or AWS. 2.4 Camera TachyonShare uses the camera to scan pairing QR codes. Camera images are processed for device pairing and are not uploaded to Tachyon Bit or AWS. 2.5 Local Network Information TachyonShare processes local IP addresses, connection details, pairing information, and cryptographic session information to connect participating devices over a local network. This information is not used for advertising or tracking. 3. Device-to-Device Transfers TachyonShare uses encrypted peer-to-peer connections to transfer supported data between participating devices. Transfer content: is sent directly between devices selected by the user; is not routed through Tachyon Bit or AWS servers; is not retained by Tachyon Bit after the transfer; Tachyon Bit and AWS do not receive transfer content or the cryptographic keys required to decrypt it. The receiving device and its user may retain transferred content. You are responsible for confirming the identity of the peer device before approving a connection or transfer. 4. Information Collected by Tachyon Bit 4.1 Pseudonymous Device Identifier For trial activation, device-specific activation, subscription verification, and abuse prevention, TachyonShare generates and uses a pseudonymous device identifier associated with a particular device. The identifier is transformed before transmission and is not the original device identifier. It may still be considered personal information because it is associated with a particular device. Collection of this identifier is required to administer device-level free-trial eligibility, support device-specific activation, or verify subscription entitlement on eligible devices. If the identifier cannot be generated or transmitted, TachyonShare may be unable to determine free-trial eligibility or activate subscription features. 4.2 Platform Information The App sends device platform information identifying the platform as Android to support activation, compatibility, and subscription management. 4.3 First Activation Time We store the first activation time associated with the device-level trial record. This information is used to support device-level free-trial eligibility and prevent repeated unauthorised trials. 4.4 Subscription Status We store limited subscription and device-binding information, including the product identifier, base-plan identifier, entitlement state, expiry time, verification time, device label, and a pseudonymous hash of the Google Play purchase token, to verify subscription entitlement and enforce the twelve-device limit. When you activate, restore, or manage a subscription, TachyonShare sends necessary verification information to Tachyon Bit's licensing backend over HTTPS. Tachyon Bit may use product and purchase verification information to verify subscription entitlement with Google Play. The raw purchase token is not retained as a long-term application record, and Tachyon Bit does not collect or retain payment-card details. Google Play independently processes purchases and generally handles any applicable renewals, cancellations, and refunds under its policies. Where applicable, Tachyon Bit may assist with or process refunds through Google Play's merchant tools. Refund requests, eligibility, and outcomes remain subject to Google Play's policies and applicable law. 4.5 Server Security Logs We maintain limited technical and security logs to operate, protect, and diagnose the licence service and prevent misuse. These logs may include source IP addresses as observed by the service or reverse proxy, request timestamps, request methods and paths, response status, user-agent information, and other technical request metadata. We use these logs for security monitoring, abuse and fraud prevention, incident investigation, service reliability, troubleshooting, and the protection of our systems and users. Access to these logs is restricted to authorised Tachyon Bit personnel and infrastructure or security service providers acting on our behalf, on a need-to-know basis. We may also disclose relevant information where reasonably necessary to comply with law, investigate security incidents, or establish, exercise, or defend legal claims. We do not use security logs for advertising, behavioural profiling, or tracking across unrelated apps or websites. Our retention practices for server security logs are described in Section 8. 4.6 Communications TachyonShare does not require an email address or user account. If you contact us voluntarily, we receive your email address and the information included in your message. We use it only to respond, provide support, handle privacy requests, maintain necessary records, or comply with legal obligations. 5. How We Use Information We use collected information to: determine and enforce device-level free-trial eligibility; verify subscription entitlement on eligible devices; administer the 3-day device-level free trial and the twelve-device subscription limit; verify subscription status; prevent trial, licence, and subscription abuse; detect unauthorised licence use or system-clock manipulation; maintain service security and reliability; diagnose activation and subscription problems; respond to support and privacy requests; comply with applicable Australian and New Zealand laws. We do not use collected information for advertising, user profiling, or tracking across unrelated apps or websites. 6. How We Share Information We do not sell or rent personal information. We may disclose limited information to the following parties. 6.1 Amazon Web Services Licence and subscription records are hosted through Amazon Web Services (AWS) infrastructure in Australia. AWS processes hosted information as an infrastructure provider on our behalf and is not authorised by us to use that information for advertising. 6.2 Google Play Google independently collects and processes Google Account, payment, order, and purchase information when you purchase or manage a subscription through Google Play. That processing is governed by Google's own terms and privacy policy. For activation, restoration, or subscription-device management, Tachyon Bit's licensing backend uses limited purchase verification and product information to verify entitlement with Google Play. Tachyon Bit's application records retain a pseudonymous hash of the purchase token and limited entitlement information, such as the product, base plan, subscription state, expiry, device label, device binding, and verification timestamps. Tachyon Bit does not collect or retain payment-card details or the raw purchase token in its application records after verification. As part of this backend verification query, Tachyon Bit does not send files, contacts, clipboard content, camera images, or the pseudonymous device identifier to Google Play. Where applicable, Tachyon Bit may assist with or process refunds through Google Play's merchant tools. Google Play controls its own processing, and refund requests, eligibility, and outcomes remain subject to Google Play's policies and applicable law. 6.3 Legal and Safety Disclosures We may disclose information where reasonably necessary to: comply with applicable law, legal process, or enforceable government requests; protect the rights, property, safety, or security of users, Tachyon Bit, or others; investigate fraud, abuse, unlawful activity, or security incidents; establish, exercise, or defend legal claims. 6.4 Business Transfers If Tachyon Bit is involved in a merger, acquisition, restructuring, or sale of assets, relevant information may be transferred as part of that transaction, subject to applicable privacy law and appropriate safeguards. 7. Storage and Cross-Border Processing Tachyon Bit Limited is based in New Zealand. Licence and subscription data is hosted by AWS in Australia. Information may therefore be processed in New Zealand and Australia. We take reasonable steps to ensure that service providers protect information consistently with applicable privacy requirements. Files, contacts, clipboard content, and other transfer content are sent directly between user-selected devices and are not transferred to Tachyon Bit or AWS. 8. Data Retention We retain information as follows: Salted device identifier: retained for as long as reasonably necessary to enforce the one-free-trial-per-device policy, support device-specific activation, and prevent trial or licence abuse, unless earlier deletion is required by law. First activation time: retained together with the relevant device-level trial record for as long as reasonably necessary for trial administration and abuse prevention, unless earlier deletion is required by law. Platform information: retained together with the relevant activation, licence, or subscription record for as long as reasonably necessary for activation, compatibility, licence management, and subscription support. Subscription status and purchase-token hash: retained while the subscription is active and for up to twelve months after it ends where reasonably necessary for subscription verification, support, fraud prevention, dispute resolution, or legal compliance. Server security logs, including source IP addresses: retained for up to one year and then deleted or de-identified, unless longer retention is required by law or reasonably necessary for an active security incident, fraud investigation, dispute, or legal claim. Deletion or de-identification may be delayed for encrypted backups until the applicable backup rotation cycle is completed. Access remains restricted during that period. Support and privacy correspondence: retained only for as long as reasonably necessary to resolve the request, maintain necessary records, or comply with legal obligations. Files, contacts, clipboard content, and transfer information: not retained by Tachyon Bit or AWS. Information may be retained longer where required by law or necessary to establish, exercise, or defend legal claims. 9. Access, Correction, and Deletion You may request access to, correction of, or deletion of information held by Tachyon Bit. Deletion requests will be assessed in accordance with applicable law and our lawful retention requirements. Deletion requests may cover personal information we hold about you, subject to applicable law and any lawful retention requirements. Access, correction, or deletion requests relating to security logs may be limited or delayed where disclosure or deletion would compromise security investigations, fraud prevention, legal claims, or other lawful retention requirements. Send requests to: [email protected] We may request limited information necessary to identify the relevant device record and verify the request. We will not ask for your Google Account password or payment-card information. We will respond to access and correction requests within the timeframes required by applicable law. Other verified privacy requests will generally be handled within 30 days unless a longer period is permitted or required by law. Deleting information associated with a device may require TachyonShare to repeat device activation or re-verify trial or subscription entitlement on that device. Deleting TachyonShare or requesting deletion of Tachyon Bit records does not cancel a Google Play subscription. You must cancel subscriptions separately through Google Play or wait for the subscription to expire automatically. 10. Security We use reasonable technical and organisational safeguards, including: salted cryptographic hashing of Android device identifiers before transmission; HTTPS communications with the licence service; encrypted peer-to-peer transfer sessions; secure local storage for licence information; authenticated and integrity-protected licence data; restricted access to hosted systems; limited collection and retention. No electronic system can guarantee absolute security. Users should keep their devices updated, protect local-network access, verify paired devices, and maintain backups of important data. 11. Children and Minors Users who are under the age at which they can enter into a binding agreement independently must use the App only with the permission and supervision of a parent or legal guardian, consistent with the Eligibility section of the Terms of Service. We do not knowingly collect personal information from children under 13 without appropriate consent. If you believe a child has provided information without appropriate consent, contact [email protected]. 12. Your Rights and Complaints Users may have rights under the New Zealand Privacy Act 2020 or the Australian Privacy Act 1988, where applicable, including rights to request access to and correction of personal information. Please contact us first at [email protected]. We will acknowledge privacy complaints within a reasonable period, investigate the matter, and provide a written response explaining the outcome and any action we propose to take. If you are not satisfied with our response, you may contact: the Office of the Privacy Commissioner in New Zealand; or the Office of the Australian Information Commissioner in Australia. 13. Third-Party Services Google Play, operating-system providers, device manufacturers, and AWS may process information under their own privacy policies. This Privacy Policy does not control the independent privacy practices of those third parties. 14. Changes to This Privacy Policy We may update this Privacy Policy to reflect changes to the App, data practices, service providers, or legal requirements. For material changes, we will provide reasonable notice through the App, our website, Google Play, or another appropriate method. The effective date at the top identifies when the current version takes effect. 15. Contact Us For privacy questions, requests, or complaints, contact: Privacy Officer Tachyon Bit Limited 96 Whangaparaoa Road, Red Beach New Zealand 0932 Website: https://tachyonbit.com Email: [email protected] Phone: +642108252430
LEGAL