Privacy Policy
Last updated: August 2026
Wisfer is engineered with privacy as a foundational principle. We do not collect, monitor, monetize, or transmit any personal files, telemetry, or user data to external servers or third parties. All file transfers and authentication occur 100% locally on your device.
1. Overview
Wisfer (WiFi File Transfer & FTP Server) is an offline-first Android file server utility. It turns your device into an FTP, FTPS, SFTP, and Web HTTP server to facilitate rapid wireless file transfers directly between your device and your personal computers or local network clients. All network traffic, file streams, and authentication operations occur exclusively within your local area network (LAN) or direct Wi-Fi hotspot.
2. Android System Permissions & Usage
Wisfer requests explicit Android system permissions strictly for the technical functioning of local network socket listeners, background transfer stability, system share sheet flows, and file system management:
- Internet Access (
INTERNET): Required to open local TCP/IP server sockets on your designated ports (e.g. 2121, 2222, 8080) and listen for incoming client transfer requests over Wi-Fi or tethering. - Local Network Access (
ACCESS_LOCAL_NETWORK): Required on Android 15+ (API 35/36) to enable incoming TCP socket connections from other devices on your local Wi-Fi or hotspot subnet. - Network & Wi-Fi State (
ACCESS_NETWORK_STATE,ACCESS_WIFI_STATE,CHANGE_WIFI_STATE): Used to detect active network interfaces, retrieve the current local IP address to display in the UI and QR codes, and manage automated Wi-Fi triggers. - Nearby Wi-Fi Devices (
NEARBY_WIFI_DEVICES): Used on Android 12+ with theneverForLocationflag to manage local Wi-Fi connectivity and Wi-Fi hotspot states without tracking or collecting physical location. - Storage Access (
MANAGE_EXTERNAL_STORAGE/WRITE_EXTERNAL_STORAGE): Required for the core function of the application: allowing you to read, upload, download, move, and organize files stored on internal and external storage through your connected FTP/SFTP/Web clients and system share sheet flows (QuickShare / Save As). - Foreground Service (
FOREGROUND_SERVICE,FOREGROUND_SERVICE_SPECIAL_USE): Keeps the transfer engine, download handlers, and background services active with a persistent notification in your system tray so Android does not terminate active multi-gigabyte file transfers when your screen turns off. Declared with the special use subtype: "Local network wireless file transfer server". - Notifications (
POST_NOTIFICATIONS): Used on Android 13+ to display server connection details (IP address, active status), file transfer progress notifications, and interactive passwordless device login approval prompts. - Wake Lock (
WAKE_LOCK): Prevents the CPU from entering deep sleep during ongoing large file transfers to avoid incomplete or corrupted transfers. - Battery Optimization (
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS): Optional setting to prevent OEM system battery managers from throttling long-running file transfers. - Boot Completion (
RECEIVE_BOOT_COMPLETED): Used only if you explicitly enable "Auto-start on Boot" in settings, allowing the server service to resume upon device startup.
3. Device Prompt Authentication & Local Broadcasts
When using the "Tap Prompt on Phone" passwordless login feature on the Web HTTP interface, approval requests are broadcasted strictly inside your device via local Android receivers (LoginPromptActionReceiver). No push notification tokens, credentials, or session data are ever transmitted to external servers, cloud services, or Firebase Cloud Messaging (FCM).
4. Data Storage & Cryptography
All application settings, configured user credentials, static login tokens, SSH host keys (Ed25519/RSA), and TLS certificates are stored locally inside the application's secure, sandboxed private directory on your device. Android cloud auto-backup is disabled (android:allowBackup="false") to prevent sensitive server credentials and private keys from syncing to external cloud accounts.
5. Zero Telemetry, Analytics, or Third Parties
Wisfer contains zero advertising networks, zero analytics SDKs (such as Google Analytics or Firebase), and zero diagnostic trackers. No telemetry or crash data leaves your device under any circumstance.
6. Contact Us
If you have any questions or feedback regarding Wisfer or this Privacy Policy, please feel free to reach out to us at dev@firedfox.com.