Your files
PhoneToPC photo and document content is stored on the Windows PC you pair with the Android app. The public relay routes authorized requests through the active PC tunnel and is not intended to retain copies of those files.
Relay account and device data
The relay stores the information needed to authenticate an account and identify paired devices, including a username, a password hash, device identifiers, device display names, library names and last-seen/tunnel state. Passwords are not stored in plaintext.
Operational logs
The website proxy, relay and VPS may process network addresses, timestamps, request paths, response status and security events for reliability, abuse prevention and incident investigation. Logs should not contain passwords, API keys or file content.
Android and Windows storage
The Android app stores pairing settings and encrypted credentials on the device. The Windows host stores per-installation secrets, pairing state, connection logs and the libraries you configure. Removing either application may require separate removal of retained file libraries if you want them deleted.
Third-party services
The current website does not load third-party advertising, analytics or remote font scripts. VPS hosting and domain infrastructure necessarily process network traffic required to serve the website and relay.
Security and retention
Operational information is retained only as needed for the early-access service, troubleshooting and security. File-trash and thumbnail caches on the PC have configured cleanup periods. See the security model for technical controls.
Your choices
You can stop the Windows host to make the PC unavailable remotely, remove pairing in the app, uninstall PhoneToPC, or request a planned credential rotation. Account self-service deletion is not yet available in this early-access build.