Privacy

What stays on your devices

Screen video, pointer and keyboard input, your task history, the assistant’s memory and your schedules are stored on the computer you control and sent only to devices you have paired, encrypted with keys generated on your devices during pairing. The exception is what the assistant needs for a task, which also goes to the model you chose for it (see The assistant, below).

What the relay sees

When you are away from your own network, traffic goes through our relay so the two devices can find each other. The relay forwards encrypted bytes. It sees the size and timing of those bytes, the IP addresses of the two ends, and a random routing token that lets it match one connection to the other. It cannot decrypt anything, and the code that forwards is structurally unable to reach the code that does crypto — a test fails the build if that ever changes.

What the relay keeps, and for how long: the routing token stays in its memory while a connection waits for the other end (up to two minutes at a time) and while the two are connected, and is dropped when they disconnect or the wait runs out. To stop one address from flooding it, the relay counts each IP address’s recent connections in memory and deletes that count at its first clean-up after the address has gone 10 minutes without connecting (clean-ups run at most every five minutes). The relay writes none of this to disk, and nothing it logs contains an IP address or a token. The web server in front of it, which handles the connection’s TLS encryption, keeps no access log. Its error log records a request, with the IP address it came from, only when it cannot reach the relay at all, for example while the relay restarts.

What we collect

• From the helper: its update check, which fetches poketpc.com/mac/appcast.xml, and a standing connection to our relay for each paired device, so that device can reach the computer from anywhere. The relay sees only what the section above describes. No account is required to use Poket PC today.
• From the Android app: no usage statistics, and no analytics, crash reporting, ads or account of our own. The app connects to your own computer, directly on your network or through our relay, which sees only what the section above describes. The one part of it that reports anything is Google’s QR scanner, which reports to Google, not to us (see The Android app, below).
• Crash and performance reports only if you opt in through Apple’s own setting. They reach us through Apple, aggregated. On Android, Google Play passes us crash and app-not-responding reports only from phones whose owners let them share usage and diagnostics with Google.
• App usage statistics. The iPhone app and the web client (not the Android app) send a short list of events to our own server: that the app opened and which screen is showing, that pairing started, succeeded or failed (as a category, never the message), that a session started or ended and how long it lasted, and whether an assistant task finished, failed or was cancelled (never what it was). Each event carries a random ID created on your device, a session ID (the time the session started), in the iPhone app how long it was in use, the app’s version and platform, and the country your device is set to. The random ID is not tied to your name, email or Apple ID, but it links one device’s events together, so the App Store privacy label counts this as data linked to you. Nothing else: not your device’s or computer’s name, not your pairing details, not your screen, keystrokes or prompts, and not an advertising identifier. Our server accepts only those fixed event names and values, drops everything else, keeps no log of them, and does not pass your IP address on. It forwards them to Google Analytics so we can count usage. Turn it off with Share usage stats (called Share anonymous usage stats in iPhone 1.0), which also deletes the random ID; it starts off in the EEA, the UK and Switzerland, and in browsers that send Global Privacy Control.
• Purchases. Poket PC 1.0 sells nothing: there are no in-app purchases. When a paid plan arrives, Apple will process the payment and RevenueCat will record the subscription status against a random identifier; this page will change first.
• Ads. Poket PC 1.0 shows no ads. The iPhone app includes Google’s ads library so that a later version can offer an optional ad; in 1.0 that library is never started and loads nothing. Because it is present, the App Store privacy label lists what it would collect. The Android app contains no ads library at all. We do not ask for permission to track you.

The Android app

The Android app is on Google Play (version 1.0.0). This section describes that version.

• What it keeps on the phone: the computers you paired (each one’s name, public key, pairing code and routing token, when you paired it, and the address it last connected on), the phone’s own pairing key, and where you left the floating control. The pairing key is encrypted with a key held in the phone’s hardware-backed Android Keystore (in its StrongBox security chip when it has one), which opens only while the phone is unlocked. None of this is included in Android backups or device-to-device transfers. Your tasks, history, the assistant’s memory and your computer’s screen are shown from the computer and are not saved on the phone, and neither is the computer’s operating system, which it reports each time the phone connects so the modifier keys carry the right names (such as Cmd or Win).
• The camera: used only to scan the pairing QR code, and asked for only when you tap Scan QR code. Each frame is decoded on the phone and is never saved or sent anywhere. You can pair without the camera by entering the pairing link instead.
• What it sends, and to whom: your touches, clicks and keystrokes, the text you type, the tasks you give the assistant, what you add or change on its other screens (such as facts for the assistant to remember, or schedules), and the phone’s model name and app version go only to your own computer, end-to-end encrypted, directly on your network or through our relay, which cannot read them. To find your computer on the same network, the app asks the local network which Poket PC computers are there; that question stays on your network.
• Google’s QR scanner: the scanner is Google’s ML Kit, which runs on the phone. ML Kit sends Google diagnostics about itself, including the phone’s make, model and Android version, the app’s name and version, an identifier for this installation, how long scans took, the scanner’s settings, input and output sizes, and error codes. That list comes from Google’s ML Kit data disclosure; the camera image and what the code says are not on it, and Google says the data is encrypted in transit and not passed to third parties. We do not receive it.
• No analytics, crash reporting, ads or account of our own. Removing the app, or clearing its storage in Android’s settings, deletes everything it kept on the phone. To cut the phone off from your computer as well, revoke it on the computer.

This website

poketpc.com uses Google Analytics to count visits and Google AdSense to show ads. Both set cookies and receive your IP address and browser details under Google’s own terms; see how Google uses information from sites that use its services. In the EEA, the UK and Switzerland you are asked first, and nothing is stored until you agree; elsewhere you can opt out of personalized ads at Google’s ad settings, and a browser that sends Global Privacy Control never gets personalized ads here. None of this runs in the web client, which lives on a different site.

The assistant

The assistant runs on your computer, with the model you pick there: your Claude subscription through Claude Code, the Claude API or xAI’s Grok with your own key set up on that computer, or a local model in Ollama. With a cloud model, your prompts, the assistant’s memory and the screenshots it needs go to that provider (Anthropic or xAI) under your account and their terms; with Ollama they stay on your computer. We do not receive them, and we do not resell model usage.

Your control

Every paired device is listed on the computer and can be revoked there, which immediately cuts any live session. Deleting the helper app leaves its data behind. To remove it, also delete the folder ~/Library/Application Support/PocketMac, the file ~/Library/Preferences/com.innoedge.pocketmac.helper.plist and, in Keychain Access, the items whose name starts with com.innoedge.pocketmac. If you gave the assistant a notes folder, it also wrote a briefings folder and followups.md there. The assistant cannot write files unless you give a task that reach, and what it is allowed to do is bounded before it starts.

Contact

Questions or a deletion request: support. This page changes when the product does; the date below is the last change.

Last updated 9 October 2026 · Innoedge Technologies Limited