TachyonShare Privacy Policy Effective Date: 10 August 2026 Tachyon Bit Limited (“Tachyon Bit”, “we”, “us”, or “our”) provides the TachyonShare Android application (“TachyonShare” or the “App”) in Australia and New Zealand. This Privacy Policy explains how TachyonShare accesses, processes, collects, uses, stores, shares, and deletes information. 1. Privacy Summary TachyonShare is designed around direct device-to-device synchronization. Files, contacts, clipboard content, and related transfer information move directly between devices selected by the user. Transfer content is not received, decrypted, or stored by Tachyon Bit or Amazon Web Services (“AWS”). TachyonShare does not require users to create an account. We do not receive or store users’ names, telephone numbers, or email addresses through normal use of the App. We do not use advertising, behavioural analytics, or third-party tracking SDKs. We do not sell personal information or use it for targeted advertising. We collect limited device and subscription information for trial activation, licence management, subscription verification, fraud prevention, and service security. 2. Information Processed on Your Device 2.1 Files and Directories TachyonShare may request access to files and directories selected by the user. The App may process file names, paths, sizes, timestamps, content hashes, directory structures, and file contents to compare, transfer, synchronize, resume, and verify transfers. This information is processed on participating devices and is not uploaded to Tachyon Bit or AWS. 2.2 Contacts If you enable contact synchronization, TachyonShare may request permission to read and write contacts. Contact information may include names, phone numbers, email addresses, postal addresses, organisations, notes, and other contact fields. Contact information is processed locally and transferred only to the peer device selected by the user. Tachyon Bit and AWS do not receive or store it. 2.3 Clipboard Content If you use clipboard sharing, TachyonShare processes the clipboard content necessary to provide that feature. Clipboard content is transferred directly to the connected peer device and is not received or stored by Tachyon Bit or AWS. 2.4 Camera TachyonShare uses the camera to scan pairing QR codes. Camera images are processed for device pairing and are not uploaded to Tachyon Bit or AWS. 2.5 Local Network Information TachyonShare processes local IP addresses, connection details, pairing information, and cryptographic session information to connect participating devices over a local network. This information is not used for advertising or tracking. 3. Device-to-Device Transfers TachyonShare uses encrypted peer-to-peer connections to transfer supported data between participating devices. Transfer content: is sent directly between devices selected by the user; is not routed through Tachyon Bit or AWS servers; is not retained by Tachyon Bit after the transfer; Tachyon Bit and AWS do not receive transfer content or the cryptographic keys required to decrypt it. The receiving device and its user may retain transferred content. You are responsible for confirming the identity of the peer device before approving a connection or transfer. 4. Information Collected by Tachyon Bit 4.1 Salted Device Identifier For trial activation, device-specific activation, subscription verification, and abuse prevention, TachyonShare derives an identifier from an Android operating-system-provided device identifier. The App applies a cryptographic hash with an application-specific salt before transmitting it. Tachyon Bit stores the salted, hashed identifier rather than the original operating-system identifier. This identifier may still be considered personal information because it is associated with a particular device. Collection of this identifier is required to administer device-level free-trial eligibility, support device-specific activation, or verify subscription entitlement on eligible devices. If the identifier cannot be generated or transmitted, TachyonShare may be unable to determine free-trial eligibility or activate subscription features. 4.2 Platform Information The App sends device platform information identifying the platform as Android to support activation, compatibility, and subscription management. 4.3 First Activation Time We store the first activation time associated with the device-level trial record. This information is used to support device-level free-trial eligibility and prevent repeated unauthorised trials. 4.4 Subscription Status We store the subscription status needed to determine whether the App has an active annual subscription. Payments, renewals, cancellations, and refunds are processed by Google Play. Tachyon Bit does not collect or retain payment-card details or Google Play transaction credentials. 4.5 Server Security Logs We maintain limited technical and security logs to operate, protect, and diagnose the licence service and prevent misuse. We do not retain request IP addresses. Our retention practices for server security logs are described in Section 8. 4.6 Communications TachyonShare does not require an email address or user account. If you contact us voluntarily, we receive your email address and the information included in your message. We use it only to respond, provide support, handle privacy requests, maintain necessary records, or comply with legal obligations. 5. How We Use Information We use collected information to: determine and enforce device-level free-trial eligibility; verify subscription entitlement on eligible devices; administer the 30-day free trial; verify subscription status; prevent trial, licence, and subscription abuse; detect unauthorised licence use or system-clock manipulation; maintain service security and reliability; diagnose activation and subscription problems; respond to support and privacy requests; comply with applicable Australian and New Zealand laws. We do not use collected information for advertising, user profiling, or tracking across unrelated apps or websites. 6. How We Share Information We do not sell or rent personal information. We may disclose limited information to the following parties. 6.1 Amazon Web Services Licence and subscription records are hosted through AWS in its Sydney Region, Australia (ap-southeast-2). AWS processes hosted information as an infrastructure provider on our behalf and is not authorised by us to use that information for advertising. 6.2 Google Play Google independently processes subscription payments, renewals, cancellations, and refunds under its privacy policies. We may receive or verify limited subscription-status information required to provide paid functionality. We do not retain payment-card details or Google Play transaction credentials. 6.3 Legal and Safety Disclosures We may disclose information where reasonably necessary to: comply with applicable law, legal process, or enforceable government requests; protect the rights, property, safety, or security of users, Tachyon Bit, or others; investigate fraud, abuse, unlawful activity, or security incidents; establish, exercise, or defend legal claims. 6.4 Business Transfers If Tachyon Bit is involved in a merger, acquisition, restructuring, or sale of assets, relevant information may be transferred as part of that transaction, subject to applicable privacy law and appropriate safeguards. 7. Storage and Cross-Border Processing Tachyon Bit Limited is based in New Zealand. Licence and subscription data is hosted by AWS in Australia. Information may therefore be processed in New Zealand and Australia. We take reasonable steps to ensure that service providers protect information consistently with applicable privacy requirements. Files, contacts, clipboard content, and other transfer content are sent directly between user-selected devices and are not transferred to Tachyon Bit or AWS. 8. Data Retention We retain information as follows: Salted device identifier: retained for as long as reasonably necessary to enforce the one-free-trial-per-device policy, support device-specific activation, and prevent trial or licence abuse, unless earlier deletion is required by law. First activation time: retained together with the relevant device-level trial record for as long as reasonably necessary for trial administration and abuse prevention, unless earlier deletion is required by law. Platform information: retained together with the relevant activation, licence, or subscription record for as long as reasonably necessary for activation, compatibility, licence management, and subscription support. Subscription status: retained while the subscription is active and for up to 12 months after it ends where reasonably necessary for subscription verification, support, fraud prevention, dispute resolution, or legal compliance. Server security logs: retained for up to one year and then deleted or de-identified, unless longer retention is required by law or reasonably necessary for security incidents or legal claims. Support and privacy correspondence: retained only for as long as reasonably necessary to resolve the request, maintain necessary records, or comply with legal obligations. Files, contacts, clipboard content, and transfer information: not retained by Tachyon Bit or AWS. Information may be retained longer where required by law or necessary to establish, exercise, or defend legal claims. 9. Access, Correction, and Deletion You may request access to, correction of, or deletion of information held by Tachyon Bit. Deletion requests will be assessed in accordance with applicable law and our lawful retention requirements. Deletion requests may cover personal information we hold about you, subject to applicable law and any lawful retention requirements. Send requests to: [email protected] We may request limited information necessary to identify the relevant device record and verify the request. We will not ask for your Google Account password or payment-card information. We will respond to access and correction requests within the timeframes required by applicable law. Other verified privacy requests will generally be handled within 30 days unless a longer period is permitted or required by law. Deleting information associated with a device may require TachyonShare to repeat device activation or re-verify trial or subscription entitlement on that device. Deleting TachyonShare or requesting deletion of Tachyon Bit records does not cancel a Google Play subscription. You must cancel subscriptions separately through Google Play. 10. Security We use reasonable technical and organisational safeguards, including: salted cryptographic hashing of Android device identifiers before transmission; HTTPS communications with the licence service; encrypted peer-to-peer transfer sessions; secure local storage for licence information; authenticated and integrity-protected licence data; restricted access to hosted systems; limited collection and retention. No electronic system can guarantee absolute security. Users should keep their devices updated, protect local-network access, verify paired devices, and maintain backups of important data. 11. Children and Minors TachyonShare is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users who are under the age at which they can enter into a binding agreement independently must use the App only with the permission and supervision of a parent or legal guardian. If you believe a child has provided information without appropriate consent, contact [email protected]. 12. Your Rights and Complaints Users may have rights under the New Zealand Privacy Act 2020 or the Australian Privacy Act 1988, where applicable, including rights to request access to and correction of personal information. Please contact us first at [email protected]. We will acknowledge privacy complaints within a reasonable period, investigate the matter, and provide a written response explaining the outcome and any action we propose to take. If you are not satisfied with our response, you may contact: the Office of the Privacy Commissioner in New Zealand; or the Office of the Australian Information Commissioner in Australia. 13. Third-Party Services Google Play, operating-system providers, device manufacturers, and AWS may process information under their own privacy policies. This Privacy Policy does not control the independent privacy practices of those third parties. 14. Changes to This Privacy Policy We may update this Privacy Policy to reflect changes to the App, data practices, service providers, or legal requirements. For material changes, we will provide reasonable notice through the App, our website, Google Play, or another appropriate method. The effective date at the top identifies when the current version takes effect. 15. Contact Us For privacy questions, requests, or complaints, contact: Privacy Officer Tachyon Bit Limited 96 Whangaparaoa Road, Red Beach New Zealand 0932 Website: https://tachyonbit.com Email: [email protected] Phone: +642108252430
LEGAL