VIBESCREEN · PRIVACY NOTICE
Your Mac connection.
Your information.
Information we use
Account authentication and device connections use an Apple sign-in identifier, internal account and device identifiers, device name and platform, public key, last response time, device approvals and permissions, session records and trial expiry. Current sign-in does not request name or email scopes. Vibescreen does not receive your Apple password.
Apple refresh tokens used for authorization revocation are encrypted on the server. App refresh credentials are stored as hashes. Device private keys and app login credentials are kept in the device Keychain. Authentication replay-prevention information and short-lived browser login requests are also processed.
If you enable optional local command-based unlocking, the Mac login password you enter is stored in this Mac’s Keychain. Tools running under the same Mac user account may request unlocking; the password is not sent to Vibescreen servers or Codex. You can disable the feature and remove the saved password in the app.
Quick unlock
Optional quick unlock stores your Mac login password in the device-only Keychain of this iPhone/iPad. Automatic unlock during a connection uses authenticated encrypted peer control. The current version has no unlock-without-connecting action. For older-client compatibility, the server may temporarily handle requests encrypted for the target Mac only. These expire after 30 seconds and are scheduled for deletion 30 seconds after expiry; cleanup failures may delay removal. Mac build 57 and later do not execute these standalone requests. You can delete the saved password or turn off automatic unlock in the app’s quick-unlock settings. FileVault preboot and another user’s login are unsupported.
Screen, input, sound and files
Video and control data travel between approved devices using encrypted WebRTC. The Vibescreen backend has no upload function for screen video, raw key input, clipboard content or user files. After a successful connection, the iPhone/iPad saves one reduced Mac frame in its protected local cache for the device-list preview. It is not a live image. You can clear it in Settings; signing out or removing the device also deletes it. Audio, clipboard and files are sent to the other device only within the permissions you enable. Received files can remain on that device.
Connection negotiation passes through the authenticated server and may contain network addresses and connection information. When a direct connection is unavailable, a TURN server may relay encrypted packets within the allowed usage limit.
Diagnostics and service providers
Limited diagnostics record connection, first frame, recovery, ending and failure events, elapsed time and direct/relayed path type. Account-linked and device-linked records are not anonymous. Login rate limiting uses time-windowed hashes derived from the requesting IP address.
Apple provides login and TestFlight distribution. Cloudflare Workers, D1 and Durable Objects provide authentication, device management, signaling and security. Processing is not confined to South Korea and can occur on providers' global infrastructure. See Apple's privacy policy and Cloudflare's privacy policy.
Developers can view feedback, screenshots and crash information you send through TestFlight. Support messages are used to reply and resolve problems. Do not attach sensitive screens or passwords. The current app contains no advertising or tracking SDK and has no products available for purchase.
When you choose Check for updates on the Mac, the app fetches a signed update feed and the selected installer from the existing Cloudflare server. The provider may process the requesting IP and network request information. Screen content and Mac login passwords are not sent to the update server. Automatic checks and installation are off by default.
Retention and account deletion
Account, device, approval, session and trial records are kept while the account is operated. Diagnostic records older than 30 days, expired login requests and replay-prevention information are scheduled for cleanup. Cleanup failures may delay removal.
Request account deletion in viewer Settings → Account. Device access and sessions are revoked first, then account-related operational data is removed after external authorization cleanup, including Apple revocation. Provider failures can retain the information needed to retry. Received files and Apple subscriptions must be managed separately.
Cloudflare Free D1 historical recovery copies can remain within a window of up to seven days. Deleting current operational data does not immediately delete every recovery copy. Backup restoration will not be used until reapplying deletion and revocation requests has been operationally verified. Support emails are manually cleared within 90 days after resolution, except where an ongoing dispute or legal obligation requires limited retention.
Your choices and support
Screen Recording allows screen sharing; Accessibility allows input execution; Input Monitoring helps distinguish local and remote input state. You can revoke system permissions or disable sharing and control in the app. New viewer devices require Mac approval.
For information access, correction or deletion requests, contact alsrb5412@naver.com. We may request limited identity verification to prevent unauthorized disclosure. Never send a password or one-time authentication code.
Optional diagnostics and issue reports
Quality diagnostics sharing is off by default. When enabled in Settings, connection, playback and download stages, results, durations and app build numbers are linked to your account/device identifiers. Automatic diagnostics exclude filenames, paths, video titles, screen contents and input contents. Submitted issue reports contain your written description and the recent technical events you choose to attach. Diagnostics and reports are periodically removed after 30 days and during account deletion; cleanup failures may delay removal. Turning sharing off discards queued automatic events.