Privacy Policy

Summary: PalmDesk doesn’t ask you to create an account, doesn’t collect usage analytics and never stores your screen on a server. Pairing keys stay in your devices’ Keychain, and screen and control traffic is end-to-end encrypted between your two devices.

Who we are

PalmDesk (“we”) develops the PalmDesk apps and runs this website. For any privacy question or request, write to support@palmdesk.app.

Data that stays on your devices

The following is kept only on your iPhone or iPad and your Mac. It is not sent to us or to third parties.

• Device keys: Ed25519 signing and X25519 key-agreement key pairs, stored in the Keychain as available only on that device after first unlock.
• Paired devices: device name, public keys and the time of the last connection.
• Preferences: language, pointer speed, scrolling and haptics settings, last used mode, streaming shortcuts.
• Local addresses cached from Bonjour to reconnect faster on the same network.

Screen content and input

The image of your Mac’s screen and the clicks, scrolls and keystrokes you send travel directly between your two devices inside an encrypted WebRTC session. They are never recorded, never stored on our servers and never shared. With Privacy Zones in PalmDesk for Mac you can keep chosen apps out of the stream entirely, and the optional Hide sensitive screens setting pauses the image while a password field or authorization dialog is visible.

What the signalling service processes

So that your devices can find each other, PalmDesk uses a signalling service. It routes connection setup but can’t read it.

• Device identifiers and public keys, to match a phone to the Mac it wants to reach.
• Encrypted connection envelopes (SDP/ICE), which the service forwards without being able to open them.
• Online status: a routing identifier and the time it was last seen, so your iPhone can show whether your Mac is available.
• Pairing invitations: the one-time QR/9-digit code and the pairing request, stored for at most three minutes, usable once, then deleted.
• Technical logs: connection data such as IP address and time, kept briefly to operate the service and prevent abuse.

Relay (TURN)

If your network doesn’t allow a direct connection, media passes through a relay. The relay forwards encrypted packets only and can’t decrypt or record them. Relay credentials are short-lived and issued per session.

Purchases

Payments are handled entirely by Apple; we never receive your payment details, name or email address. When you use PalmDesk Pro, the app sends the transaction record signed by Apple (product, dates and a transaction identifier) to the signalling service so it can confirm your subscription.

Service providers

The signalling service, the relay and this website run on Cloudflare’s network, which processes the technical data above on our behalf. Apple processes purchases under its own privacy policy.

Camera and local network

The camera is used only to scan the pairing QR code; the image isn’t saved and doesn’t leave the device. Local Network access lets the app find your Mac on the same Wi‑Fi and connect directly. On the Mac, Screen Recording and Accessibility are required by macOS to share the screen and apply pointer and keyboard input.

What we don’t collect

• No account, email address or phone number.
• No usage analytics, advertising identifiers or third-party trackers.
• No screenshots, keystrokes or file contents.
• This website sets no cookies and loads nothing from third parties. If you close the language suggestion, that choice is saved in your own browser only.

Retention and your choices

Removing a device in PalmDesk for Mac deletes that pairing’s trust record, and later signed requests from the device are refused. Deleting the apps removes the keys and preferences stored on the device. Because the signalling service keeps no profile, there is no account to delete. You can ask us about any data relating to you at support@palmdesk.app; residents of the EU, UK and Türkiye have rights of access, correction and erasure under GDPR and KVKK.

Children

PalmDesk isn’t directed at children and doesn’t knowingly collect data from anyone under 13.

Changes

If this policy changes, the date at the top of this page changes with it. Important changes are also announced in the app.