Privacy Policy

Control My Mac is an iPhone & iPad app and a free Mac menu-bar companion that turn your iPhone or iPad into a trackpad, keyboard and remote control for your Mac. This policy also covers Control My PC, the same idea for Android phones and Windows PCs, as described below.

Summary

Your remote-control activity stays between your devices. There is no Control My Mac account. Your phone or tablet and your computer talk directly over your local network or Bluetooth, and that connection is encrypted. Optional email and update-notification features use a little data, and only if you choose them.

Core app activity

• No account or sign-in. The apps work without a profile or registration.
• No advertising or behavioral tracking. The apps contain no advertising SDKs and don’t track what you do on your computer.
• Direct device control. Pointer movements, taps, scrolls, the keystrokes you choose to send, and app-launch and window-switch commands go directly from your phone or tablet to your paired computer. They are encrypted, used only to control your computer in real time, and are never sent to us or to a third party.

Subscriber gift and news emails

The subscriber gift (your choice of a free month of Full App or a personal code for 47% off Full App Lifetime) is a welcome gift for joining emails from Sebastian Škoić s.p. about Control My Mac and our other apps, so you only get it if you agree to receive them. When you request it, we collect your email address, language, a record of your consent (when you gave it and which wording you agreed to), delivery and unsubscribe status, and the Apple offer code assigned to you. The email address and code are encrypted in our database. To prevent abuse and give each address the gift only once, we also keep keyed hashes of your email and IP addresses.

We use this to send you the gift email, then occasional news and promo codes for Control My Mac and our other apps. Vercel runs the form, Neon stores the encrypted record, Brevo sends the emails and keeps the mailing list, and Cloudflare Turnstile checks that the request comes from a person. Apple processes the code when you redeem it.

• Legal basis. Your consent for the emails (Art. 6(1)(a) GDPR). For the abuse checks (the hashes and the security check), our legitimate interest in handing out the gift fairly (Art. 6(1)(f) GDPR).
• Withdrawing consent. You can withdraw it at any time with the unsubscribe link in every email or by writing to us. This doesn’t affect emails already sent, and a code you already received stays valid.
• How long we keep it. We keep your record while you are subscribed. When you unsubscribe, we remove your address from the mailing list and keep only the encrypted record of your request, so your unsubscribe is respected and the address can’t claim the gift again. You can ask us to delete it at any time. We keep this record (your consent, the unsubscribe and the keyed hashes) for at most 3 years after you unsubscribe, to prove your consent and stop the gift being claimed twice, and then delete it.

Windows and Android waiting list

If you ask to be told when Control My PC for Windows or Android is released, we collect your email address, the platforms you picked, your language and a record of your consent. The email address is encrypted in our database, and we keep keyed hashes of your email and IP addresses to prevent abuse. We send you one confirmation email when you sign up, and then use your address only to email you about those releases. This does not add you to our news emails unless you also tick the news box on the form; in that case the section above applies to those emails, and you can unsubscribe with the link in each of them. Vercel runs the form, Neon stores the record, Brevo sends the emails and Cloudflare Turnstile checks that the request comes from a person. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to support@controlmymac.com. We delete the waiting-list record after the release announcement for the platforms you picked, or earlier if you ask.

Optional update notifications

If you turn on notifications in the iPhone or iPad app, Apple gives the app an opaque device token. We store it encrypted, together with a random app-installation identifier, language, app version and delivery status, and don’t link it to your email address or Apple Account. It is used only for short summaries of Control My Mac features, improvements and important app updates, delivered by Apple Push Notification service. Turning notifications off in system Settings stops alerts; you can also ask us to delete the data.

Website hosting and statistics

Vercel Inc. hosts this website and our forms, and keeps short server logs (IP address, time, page requested) for security. To count page views, the site uses Vercel Web Analytics, which sets no cookies and doesn’t identify you or follow you across other sites. Legal basis: our legitimate interest in a secure site and in knowing which pages help people (Art. 6(1)(f) GDPR). To see where visitors stop (for example, whether they reach the download and store buttons or the gift form), the site also counts page views and those clicks with PostHog (PostHog Inc., data stored in the EU, in Frankfurt, Germany), without cookies: nothing is stored on your device and no profile is built. To tell visits apart within one day, PostHog turns your IP address and browser details into a scrambled code with a key that changes every day; the IP address itself is not stored. What you type into forms is never sent to PostHog, the statistics are deleted after at most 12 months, and if your browser sends a Do Not Track signal, nothing is counted.

The homepage video is hosted by YouTube (Google). It only loads when you press play; from then on, YouTube's privacy policy applies to the player.

Device permissions

The apps request only the permissions needed to function:

• Local Network — to discover and connect to your Mac on your own Wi-Fi network.
• Bluetooth (iPhone, iPad and Mac) — for the direct, internet-free connection between your devices.
• Camera (iPhone or iPad) — only to scan the pairing QR code shown on your Mac. No photos or video are captured, stored or transmitted.
• Notifications (iPhone or iPad) — optional, for short summaries of new features, improvements and important app updates.
• Accessibility (Mac) — so the Mac companion can move the pointer, click and type, solely to carry out the actions you send from your iPhone or iPad.
• Automation of System Events (Mac, optional) — so gestures such as a three-finger swipe can run Mac keyboard shortcuts like Mission Control.
• Input Monitoring (Mac, optional) — only while you teach a Grid button a shortcut: the Mac app notes the key combination you press, then stops listening. Nothing else is read, stored or sent.

You can revoke any of these permissions in your device settings at any time.

Control My PC for Windows and Android

Control My PC, the same idea for Windows PCs and Android phones, is available in the Microsoft Store and on Google Play. In addition to everything above, this is how it handles your data.

• Windows app. The free Windows app collects no personal data and has no account. It talks only to the phone you paired with it, directly over your local network or Bluetooth, encrypted; nothing goes through our servers. It keeps its settings and the pairing on your PC. Installed from the Microsoft Store, it gets its updates through the Microsoft Store, under Microsoft’s privacy terms. To learn a shortcut for a Grid button, it listens to the keys you press only while you record that shortcut, and it never stores or sends what you type.
• Android app. Like the iPhone app, it has no account and no advertising or tracking, and apart from the discount-code check below it talks only to your paired computer. It asks for the Camera, only to scan the pairing QR code (the image is read on the phone and never stored or sent); Nearby devices (Bluetooth), only if you choose a Bluetooth connection, and on Android 8 to 11 the system also requires the Location permission before it shows Bluetooth devices, but the app never reads your location; and Notifications, for the “Controlling (your computer)” notice shown while you are connected.
• Discount codes. If you enter a discount code in the Android app, it sends only that code to controlmypc.app to check it. Our server records that the code was used and, to stop guessing, counts tries from your network address for one hour. The address is stored only in scrambled form and deleted within two days. Nothing else is sent.

On Android, Full App is bought through Google Play: Google handles the payment and tells the app on your phone whether Full App is unlocked, we never receive your payment details, and Google’s privacy policy applies to the payment. The Windows app is free.

Purchases

The Mac app is free. The iPhone & iPad app can start a free 7-day trial, continue with the free Essentials Plan, or unlock Full App through monthly, yearly or lifetime in-app purchases processed by Apple through the App Store. We never see or store your payment details; Apple manages purchases and subscriptions under Apple's privacy policy. Paid upgrades exist only in the iPhone & iPad app and are bought there through Apple — you can't pay on this website or in the free Mac app.

Children

The apps are not designed for children under 13. The optional email signup is only for people aged 16 or older: if you are under 16, please do not sign up. If we learn that someone under 16 has signed up, we delete their email address.

Service providers, transfers and storage periods

• Mac app updates. The free Mac app regularly asks controlmymac.com whether a newer version exists; the request carries your IP address and the app version. Updates are downloaded from GitHub, which receives your IP address. Legal basis: our legitimate interest in keeping the app secure and up to date (Art. 6(1)(f) GDPR).
• Other legal bases. Discount-code checks and notifications: providing the feature you asked for (Art. 6(1)(b) GDPR); gift and news emails: your consent (Art. 6(1)(a) GDPR).
• Transfers outside the EU. Some providers (Vercel, Cloudflare, GitHub, Apple, Google, Microsoft, PostHog) are US companies and may process data in the United States. These transfers rely on the EU–US Data Privacy Framework, under which they are certified, and on the European Commission’s Standard Contractual Clauses.

Your rights

Email support@controlmymac.com to access, correct or delete the email or notification records we hold, restrict or object to their use, or receive them in a portable format. You can withdraw your email consent at any time, as described above. You also have the right to complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work, or in the UK to the Information Commissioner’s Office (ICO). Besides the authority where you live or work, you can complain to our lead authority: Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia), Dunajska cesta 22, 1000 Ljubljana, Slovenia, www.ip-rs.si. Data handled by Apple, such as purchase records and push delivery, is also governed by Apple's policies, and data handled by Google or Microsoft for Control My PC by theirs.

Changes

If this policy changes, we’ll update the effective date above and highlight material changes on this page before they take effect.

Contact

Questions? Email support@controlmymac.com.