Privacy Policy

TouchNow is designed around one principle: your data stays between your devices. This policy explains how TouchNow (including the iPhone/iPad, Android and Mac apps, the "App") handles your data.

1. What We Do Not Collect

• Screen content: Your Mac's screen and audio travel only between your devices with end-to-end encryption. We cannot access them and store no frames.
• Input: Your touch, keyboard, and mouse activity likewise travels encrypted only between your devices.
• Account data: The App requires no account registration; we hold no name, email, or any identity data about you.
• Behavioral analytics: No third-party analytics or advertising SDKs are embedded, and your usage is not tracked.

2. Data Stored on Your Devices

• Pairing credentials: The identifiers and keys generated during pairing are stored in each device's system Keychain (on Android, in app-private storage encrypted with an Android Keystore key and excluded from backups) and used to verify the identity of both ends of a connection. They can be revoked on the shared Mac at any time.
• Preferences: Virtual controller layouts, sensitivity, and similar settings are stored locally on the device.
• Connection history: the shared Mac keeps the last 100 connection records (connecting device name, start and end time) on that Mac, so you can see who has connected. It contains no screen or input content and never leaves your Mac.
• Clipboard sync: while connected, the shared Mac watches for clipboard changes and sends the contents to your paired device (and vice versa) so you can copy and paste across both. The contents travel only between your own devices, end-to-end encrypted — even when relayed we cannot read them, and they are not stored. It stops when you disconnect.
• Diagnostic log (off by default): if you turn it on, the Mac writes connection and performance events to a local file (~/Library/Logs/TouchNow-host.log) for reporting problems. It records no IP addresses, screen content or keystrokes, and stays on your Mac.
• None of this data is stored on our servers, and we cannot read it.

3. Local Network Connections

When used on the same Wi-Fi, all streaming and control traffic is a direct peer-to-peer connection; screen and input data pass through no external server. During connection setup, devices may query public STUN servers for their own network address (this involves the IP address only — no screen or input content).

4. Remote Access (Optional Paid Feature)

When cross-network Remote Access is enabled:

• The signaling server relays only the messages needed to establish a connection (each carrying a cryptographic signature) and never touches stream content.
• If a direct peer-to-peer link fails, traffic is forwarded via a TURN relay; because the stream is DTLS-SRTP end-to-end encrypted, the relay server cannot read its contents.
• The signaling server itself keeps no application-level records (no device identifiers, no connection content); the underlying cloud platform (Fly.io) may retain short-term network-level technical logs for infrastructure operations.
• Subscriptions are purchased and billed through the App Store or Google Play. The App checks your subscription status on your device; we never receive your payment details, and purchase records are not sent to our servers.

5. Automatic Updates (Mac App)

The Mac-side TouchNow Host checks for updates through Sparkle, requesting an update feed from dl.touchmac.app once an hour by default. Like any web request, this lets the server see your IP address and current version; we do not use it to build a user profile or associate it with any identifier. You can turn automatic checks off in the app menu.

6. How System Permissions Are Used

• Screen Recording (shared Mac): captures the Mac's screen for your device to view.
• Accessibility (shared Mac): injects your input into the Mac.
• Camera (iPhone, Android): used only to scan pairing QR codes; nothing is recorded or uploaded.
• Local network: discovers and connects to Macs on the same network.
• Microphone usage declaration (iPhone): initializing the audio engine requires this permission declaration; the App only plays audio sent from your Mac and never records or uploads your microphone.
• Notifications (Android, optional): shows connection status while a session is active, with buttons to return to it or disconnect.

7. Children's Privacy

The App is not designed for children under 13 and collects no personal data.

8. Changes to This Policy

If this policy changes materially, we will announce it on this page and in the App. Continued use constitutes acceptance of the updated policy.

9. Contact Us

For any questions about this policy, contact privacy@touchmac.app.

Website analytics

This website uses Cloudflare for hosting and traffic analytics. We count page views and download-button actions to understand website performance. Button counts send only the action type, page category, language and placement, without input content or full referring URLs. They use no cookies or unique visitor identifiers to link records. Normal network requests still provide Cloudflare with IP addresses and browser information; our analytics reports do not retain visitor IPs. Website analytics do not include remote-control content from the app.