Privacy policy

PocketCtrl is a native remote-control app for connecting an iPhone, iPad, or Mac to another Mac. It is made by Iterative, the trade name of TalkUp LLC, where it was created by Kylan O'Connor. Iterative is referred to as “we” or “us” in this policy. This policy covers the official PocketCtrl apps, pocketctrl.com, and support communications.

For privacy questions or requests, email hello@talkupapp.com.

When connected, PocketCtrl sends screen video from your Mac to your viewing device. Depending on the permissions and features you enable, it also exchanges Mac audio, keyboard and pointer input, and supported clipboard content. Dictated text is sent to the connected Mac as you speak. Only pair devices you trust.

Pairing exchanges device names, identifiers, network addresses, requested capabilities, and cryptographic material. The Mac owner must approve a new device. Stream and control payloads are authenticated and encrypted with the approved device's credential. Nearby discovery advertises availability and routing metadata, not the pairing credential.

We do not operate a server that receives or stores your remote desktop content. The apps do not require a PocketCtrl account and contain no advertising or developer-operated analytics SDK. We do not sell your personal information or use your remote desktop content for advertising.

In versions that include Computer Use, the feature is off by default. The host Mac owner must enable it, supply their own OpenAI API key, and separately grant Computer Use access to each paired device. Ordinary remote viewing, typing, and pointer control do not require OpenAI or send content to OpenAI through this integration.

When you start an AI task, the host Mac sends your instructions, screenshots of the selected Mac display, limited focused-control Accessibility context, and task conversation and action results directly to OpenAI over HTTPS. These requests let the model propose actions, review them, and check results. Screenshots and context can include private information visible in other apps or notifications; PocketCtrl cannot guarantee that all sensitive content is filtered out. Close sensitive content before starting and supervise the task. Our servers do not receive this task content.

PocketCtrl does not include a shared developer API key. Your key is stored in the host Mac's system Keychain and used to authenticate requests to OpenAI. It is not sent to your paired phone or tablet, the PocketCtrl website, or our support service. Approved devices can initiate tasks billed to the host owner's OpenAI account. Refreshing model availability also authenticates directly with OpenAI; testing the connection sends a short test prompt, not a screenshot. Fetching the public model and pricing catalog from pocketctrl.com sends no API key or task content, although ordinary website request metadata is processed as described below.

Hold-to-talk instructions use on-device speech recognition on the viewing device, with no cloud speech fallback. The resulting text is sent to the Mac and OpenAI when you send the instruction; speech audio is not sent to OpenAI. This feature does not continuously listen in the background. Regular remote typing dictation is separate from Computer Use.

Task conversation and usage estimates are kept in app memory, not saved as a persistent task history by PocketCtrl. Computer Use diagnostics omit task text, typed text, screenshots, and API keys, but may include operational details such as model names, timings, token counts, and error categories. OpenAI requests use store: false; this does not guarantee zero retention by OpenAI. OpenAI's API data policies, applicable retention exceptions, and your account settings still apply. See OpenAI's API data controls.

You can stop a task, disable Computer Use, revoke a device's Computer Use access, or delete the saved key in PocketCtrl's Mac settings. You can also revoke the key through OpenAI. Stopping or deleting a key does not undo actions already taken or erase information already sent to OpenAI or entered into another app.

Camera access scans pairing QR codes. PocketCtrl does not save or upload the camera video used for scanning. On the host Mac, Screen Recording permits screen capture; Accessibility permits remote input. Local Network access supports nearby discovery and communication.

Voice input on iPhone and iPad is optional and uses Apple's on-device speech recognition. PocketCtrl requires on-device support and does not fall back to server-based recognition. Microphone audio is used for transcription, not saved as an audio recording by PocketCtrl. Recognized text is sent to your paired Mac. Streamed Mac audio is paused during dictation. If on-device recognition is unavailable, you can still use the keyboard.

You can deny or revoke permissions in Settings or System Settings. Features that depend on those permissions may stop working; PocketCtrl cannot enable a denied system permission for you.

Preferences, saved computer details, and device names are stored locally. Persistent pairing credentials are stored in the system Keychain; session-only credentials are temporary. PocketCtrl does not upload credentials to a developer server. Your operating system's backup and security settings may affect locally stored data.

Diagnostic builds can write limited, rotating connection logs to local cache storage. The apps also use operating-system logging. Logs can include device, route, and error information; they are not automatically uploaded to us by PocketCtrl. Review logs and remove sensitive information before sending them for support.

You may use Tailscale for connections between networks. It is a separate service, governed by its privacy policy. PocketCtrl does not ask for your Tailscale password. Network providers may process connection metadata, and Tailscale may relay encrypted traffic when a direct connection is unavailable. Do not expose PocketCtrl's raw ports to the public internet.

Apple, GitHub, and other sites or services you choose to use have their own privacy practices. Opening an external link sends your browser to that service. Content you enter into applications on the remote Mac is handled by those applications.

This website is hosted on Vercel. Delivering and protecting the site involves processing request information such as IP addresses, requested URLs, browser information, and timestamps. Hosting logs may be available to us for troubleshooting and security. See Vercel's privacy notice.

The website uses Vercel Web Analytics to understand visits and page views. It processes information such as page URLs, referrers, browser and device information, approximate location, and visit times to provide aggregated traffic statistics. This website analytics integration does not receive your PocketCtrl API key or remote desktop task content. It is separate from the native apps and is not used by us for advertising. See Vercel Web Analytics privacy information.

If you email us, we receive your email address and anything you choose to include. We use that information to answer your request, troubleshoot issues, and maintain relevant support records. Our email and hosting providers process information to provide those services. Avoid sending passwords, pairing credentials, or sensitive screen content.

Local preferences and computer records remain until you change or remove them. Remove saved computers in the app and revoke trusted devices on the host Mac to end their access. Deleting an app may not remove its Keychain items. Disconnecting ends a session but does not automatically revoke persistent pairing or erase content entered into other apps.

We retain support information, website logs, and analytics information only as needed for the purposes above, including resolving requests, protecting the service, and meeting applicable legal obligations. Provider retention and backup practices may also apply. We cannot access or delete data stored only on your devices.

To request access, correction, or deletion of information you have shared with us, or to exercise privacy rights available where you live, contact hello@talkupapp.com. We may need to verify your request before acting on it.

We will update this page and its effective date when our data practices change, including if we introduce accounts, app analytics, subscriptions, or additional services. Where required, we will provide additional notice or request consent.