Privacy Policy
Tana3 Remote lets you view and control your own Mac from your own iPhone or iPad. This policy explains what data is involved and what happens to it.
This is a draft. Tana3 Remote is still in development and not yet publicly released. This policy describes the app as it is currently designed. We will update it before release if anything changes, and the date above will change with it.
1. Summary
- Your screen image and your keyboard and touch input go directly between your own devices, end-to-end encrypted.
- We do not record, store, or upload your screen, and we cannot see it.
- There are no accounts, no analytics, no advertising, and no tracking. We do not sell or share personal data.
- To help your devices find each other, our connection server briefly handles technical connection data (such as network addresses). It is held only as long as needed to deliver it, then discarded. It is not written to logs.
2. Your screen and input
During a session you start, your Mac captures its screen and sends it as a live video stream to your paired iPhone or iPad. Your taps, scrolls, and key presses are sent back to the Mac to control it.
- This traffic is end-to-end encrypted between your devices. The encryption keys are set up by your devices themselves; our servers never have them.
- The stream is shown live and is not recorded or saved, on your devices or anywhere else.
- We do not log the text you type, the keys you press, or anything shown on your screen.
3. Pairing and device keys
- Each device creates its own cryptographic identity key. On supported hardware this key is kept in the device's Secure Enclave and never leaves the device.
- Pairing works between devices signed in to the same Apple Account. Apple's iCloud (your private iCloud storage) is used so your own devices can find each other's public key. That data is stored by Apple in your account; Tana3 Studio cannot read it. Apple's handling of iCloud data is covered by Apple's privacy policy.
- Every new iPhone or iPad must be approved on the Mac. Both screens show the same 6-digit code, and you confirm it on the Mac before the device is trusted. The list of trusted devices is stored on your Mac.
4. Connection (signaling) server
Before a session can start, your devices exchange a few short setup messages through a small server we operate on Cloudflare's network. These messages let the devices agree on how to connect directly.
What the server handles:
- A device identifier derived from each device's public key (it is not your name, email, or Apple Account).
- Connection setup messages, which include the network addresses (IP addresses and ports) your devices can be reached at, plus timestamps and message counters.
- Your IP address, as part of any internet connection.
How it is handled:
- Setup messages are signed by your devices, so the server cannot forge or alter them without detection.
- Messages waiting to be delivered are kept for at most 5 minutes, then deleted. Nothing is stored permanently.
- For abuse prevention (rate limiting), your IP address is converted to a salted one-way hash kept only in memory. IP addresses are not written to our logs.
- Our operational logs contain only non-identifying fields, such as the type of request, a status code, and a few characters of a device identifier for troubleshooting. They never include message contents, signatures, or IP addresses.
- In the current development version, setup messages are signed but not yet encrypted, so the server technically processes the network addresses inside them in order to relay them. We plan to encrypt these messages end to end before public release, and will update this policy when we do.
5. Relay server
Some networks, especially mobile networks, block direct connections. In that case your encrypted stream is passed through a relay (TURN) service provided by Cloudflare. The relay forwards encrypted data it cannot decrypt, and we do not store any of it. Relay access uses short-lived credentials issued only to your authenticated devices.
6. Mac permissions
The Mac app asks macOS for Screen Recording permission (to capture the screen for your live session) and Accessibility permission (to turn your taps and key presses into clicks and typing). These are used only during a session you have approved. While a session is active, the Tana3 Remote icon in the menu bar turns red, and "Disconnect now" ends the session immediately. You can revoke these permissions at any time in macOS System Settings > Privacy & Security.
7. What we do not collect
- No screen recordings, screenshots, or screen contents.
- No keystrokes or typed text.
- No name, email, phone number, or Apple Account details.
- No contacts, photos, location, or files.
- No analytics, advertising identifiers, or third-party tracking or advertising SDKs.
If the app offers paid features, purchases are handled by Apple. We do not receive your payment details.
8. Service providers
- Cloudflare hosts our connection server and provides the relay service. As a network provider it processes IP addresses to deliver traffic. See Cloudflare's privacy policy.
- Apple provides iCloud (used for device discovery) and App Store purchases. See Apple's privacy policy.
We do not sell, rent, or share personal data with anyone else.
9. Retention
- Screen and input data: not stored.
- Connection setup messages on our server: deleted once delivered, or after at most 5 minutes.
- Relay credentials: expire automatically within hours.
- Device keys and your trusted-device list: stored on your own devices (and pairing records in your own iCloud) until you unpair or delete the app.
10. Your choices
- End any session instantly from the Mac menu bar.
- Remove a paired device from the Mac, or delete the app to remove its keys.
- Revoke Screen Recording or Accessibility permission in macOS System Settings.
- Contact us with any privacy question or request at the address below.
11. Children
Tana3 Remote is a general-purpose tool and is not directed at children under 13. We do not knowingly collect personal data from children.
12. Changes
We will update this page when the app or this policy changes, and revise the "last updated" date at the top.
13. Contact
Tana3 Studio · ap.shop0313@gmail.com
สรุปภาษาไทย
- ภาพหน้าจอและการสั่งงาน (แตะ พิมพ์ เลื่อน) ส่งตรงระหว่างอุปกรณ์ของคุณเอง โดยเข้ารหัสแบบ end-to-end เราไม่บันทึก ไม่เก็บ และมองไม่เห็นหน้าจอของคุณ
- ไม่มีการสมัครบัญชี ไม่มี analytics ไม่มีโฆษณา ไม่มีการติดตาม และไม่ขายหรือแบ่งปันข้อมูลส่วนบุคคล
- การจับคู่ใช้ได้เฉพาะอุปกรณ์ที่ใช้ Apple Account เดียวกัน และต้องอนุมัติบน Mac ทุกครั้งหลังยืนยันรหัส 6 หลักที่ตรงกันทั้งสองจอ
- เซิร์ฟเวอร์ช่วยเชื่อมต่อ (บน Cloudflare) รับข้อมูลทางเทคนิคชั่วคราว เช่น ที่อยู่ IP และข้อความตั้งค่าการเชื่อมต่อ เก็บไว้ไม่เกิน 5 นาทีแล้วลบ ไม่บันทึก IP ลง log
- ถ้าเครือข่ายไม่ยอมให้ต่อตรง ข้อมูลที่เข้ารหัสแล้วจะผ่านเซิร์ฟเวอร์ relay ของ Cloudflare ซึ่งอ่านเนื้อหาไม่ได้
- ระหว่างเชื่อมต่อ ไอคอนบนแถบเมนู Mac จะเป็นสีแดง และกด "Disconnect now" เพื่อตัดการเชื่อมต่อได้ทันที
- ติดต่อ: ap.shop0313@gmail.com