You can copy the url of the object and anyone can see it if it's public (you can make it public from the app). I'll add signed urls soon.