Report abuse

1. If someone is in danger

If anyone is at immediate risk of harm, contact your local emergency services first — in the UAE, police on 999. We are not an emergency service and cannot send help. Then tell us, so we can act on the Dragy side and preserve what records we have for the police.

2. What you can report

• A share link that distributes malware, phishing, or files designed to trick people;
• a share link containing illegal content, including child sexual abuse material, terrorist content or non-consensual intimate images;
• a share link that infringes your rights — for copyright and trademark, please use our Copyright Policy so your notice has the right legal form;
• someone sending you unwanted transfers or transfer requests, for example on Nearby;
• a device name or account used to harass, threaten or impersonate;
• any other breach of our Acceptable Use Policy.

3. How to report

Email [email protected]. On a share-link download page you can also choose Report this link, which brings you here. Please include:

1. What you are reporting — the full share link, or the account email address or device name involved;
2. What is wrong — the kind of abuse, and why you believe it breaks the law or our policies;
3. When and where you saw it, and how you received the link (for example, in an email from a stranger);
4. Your contact details, so we can ask questions and tell you the outcome. You can report anonymously, but we may then be unable to follow up;
5. if you are reporting on behalf of an organisation or authority, who you represent.

Don’t attach the abusive files, and never send suspected child sexual abuse material — just the link.

4. Reporting a share link

A Dragy share link looks like https://dragy.nexlla.com/app/#/l/ID/KEY. The ID identifies the link on our server; the KEY is the decryption key, which our server never receives through normal use.

• Send us the full link, exactly as you received it. It’s the most reliable way for us to identify it, and it lets us confirm the link is genuine. If you prefer, you can remove everything after the ID — we only need the ID to disable it.
• We use the ID to find the link, disable it and permanently delete its encrypted files, so it stops working for everyone.
• We don’t routinely open reported files. We may do so only where it is lawful and necessary to assess a report — for example to confirm suspected malware — and we never open suspected child sexual abuse material. To confirm
• Once a link has expired or reached its download limit, its files are already gone; we can still act on the account that created it.

5. Reporting an account or device

Tell us the account’s email address if you know it, or the device name you saw, the approximate time, and how you were connected (Nearby, a code, or a link). For Nearby harassment, also tell us roughly where you were (for example “the café Wi-Fi at …”), since Nearby works by network. We don’t publish who owns a device name, but we may restrict accounts, devices and network addresses that abuse the service.

To stop it happening right away: decline the transfer, turn off Nearby visibility in Settings → Privacy & Nearby, and, if it’s one of your own devices you don’t recognise, remove it in Settings → Your devices and change your password.

6. Child sexual abuse material

We have zero tolerance for child sexual abuse material (CSAM). When we receive a credible report, we immediately disable the link and delete its files, terminate the accounts involved, preserve the limited records we hold (such as account details, device records, link metadata and relevant logs), and report to [the competent UAE authorities and, where applicable, the U.S. National Center for Missing & Exploited Children (NCMEC) — confirm]. You can also report directly to your national hotline or police — for example through the INHOPE network of hotlines or, in the US, the NCMEC CyberTipline.

Do not download, screenshot, copy or forward the material, even to report it.

7. What happens next

• Acknowledgement within [2 business days — confirm]; reports of CSAM, active malware or phishing, or threats to someone’s safety are prioritised and handled within [24 hours — confirm]. To confirm
• Review by a person, using the information you give us and the limited metadata we hold.
• Action where the report is credible: disabling the link and deleting its data; warning, restricting, suspending or terminating the account; blocking devices or network addresses; and, where required or necessary to protect someone, reporting to law enforcement.
• Outcome — we tell you what we did, unless that would compromise an investigation or the law prevents it. The user affected is usually told the reason and can ask us to review the decision.

We keep records of reports and actions for [3 years — confirm]. To confirm

8. What we can’t do

Because Dragy is end-to-end encrypted and doesn’t keep files after delivery, we can’t scan or search content, recover files that have been deleted or delivered, remove copies already downloaded to someone’s device, act on transfers that went directly between devices without touching our servers, or tell you who a person is. If you need that information for legal proceedings, it must be requested by the police or a court — see our Law Enforcement Guidelines.

9. Protecting yourself

• Only accept transfers you expect, from people you know, and compare the verification emoji.
• Treat files from strangers like any download — don’t open unexpected executables or documents, and scan them.
• Turn off Nearby visibility on public networks if you don’t need it.
• Never share connection codes, sign-in QR codes or your share links with people you don’t trust.

10. Other kinds of reports

• Copyright or trademark: Copyright Policy, [email protected]
• Security vulnerabilities in Dragy: Reporting a vulnerability, [email protected]
• Requests from police and authorities: Law Enforcement Guidelines, [email protected]
• Privacy concerns: [email protected]

To report abuse, write to [email protected].