Privacy Policy

The short version

Deskcrew, Meme Vault, Kawaii Coffee Timer, and Relay have app-specific policies. Read each policy for that app's data practices, purchase handling, and optional measurement features.

What the apps access — and where it stays

Each local utility only touches what it needs to do its job, and its working content stays on your device:

• Sonance EQ, Mixer, Recorder process audio locally through macOS Core Audio; recordings are written only to the folder you choose.
• Sonance Voice processes microphone audio locally in real time.
• Sonance Scribe records system and microphone audio only after you press Start, stores separate tracks in your chosen folder, and uses on-device speech recognition. Its local index stores titles, timestamps, file paths, transcription status, and a security-scoped folder bookmark—not transcript text or audio.
• ArchiveKey reads original photo and video resources through PhotoKit and writes them only to the folder you select. Filenames, content hashes, Photos identifiers, and backup receipts remain in that folder. PhotoKit may contact Apple's Photos service to retrieve an iCloud-only original.
• Lumen Grab performs text recognition (OCR) on-device using Apple's Vision framework; captured images are not stored or sent anywhere.
• Lumen Pick reads a pixel color you point at.
• Clip Contract stores the primary clipboard content needed to reproduce a copy-and-paste issue, plus a local contract snapshot containing pasteboard type identifiers, byte counts, SHA-256 equality digests, item count, and source-app metadata. It does not retain raw secondary representation payloads. Captures and baselines stay on the Mac, and content-free diagnostic reports omit clipboard values and equality digests.
• Menu Vitals reads system statistics and the process list locally.
• SnapZones uses the macOS Accessibility API to move windows; it reads nothing about their contents.
• DevForge transforms text you enter entirely on-device. Its limited product analytics never include that text or the generated output.
• CloseCircle keeps family names, relationships, feed content, stories, help-request text, and scam-check text on the device. Its limited analytics never include that content; a bounded mood choice may be included when a check-in is completed.
• FloatPlayer plays videos you select or URLs you provide. Imported videos, URLs, titles, filenames, bookmark notes, and playback positions remain on your device and are never included in analytics.

Purchases

Some apps offer an optional one-time “Pro” purchase. Purchases are handled by Apple through the App Store. Clip Contract validates its Pro entitlement directly with Apple's StoreKit. Some other apps use RevenueCat, a purchase-management service that receives an anonymous identifier and basic device information — never the content you use the app with. We do not receive your payment details; Apple handles all payment information. See also Apple's Privacy Policy.

Data we collect

Permissions you may be asked for

• Audio capture (Sonance EQ / Mixer / Recorder) and microphone (Sonance Voice) — to process the audio you ask the app to handle.
• Screen & system audio recording, microphone, speech recognition, and a selected folder (Sonance Scribe) — to record only when you press Start, transcribe locally, and save the files you requested.
• Photos and a selected folder (ArchiveKey) — to read original media and create the backup you requested without changing your Photos library.
• Screen Recording (Lumen Grab) — required by macOS to read the pixels you select for OCR.
• Accessibility (SnapZones) — required by macOS to move and resize windows.

These permissions are granted by you in System Settings and can be revoked at any time.

vrdesk — Quest headset, web, iPhone, and Mac

How native vrdesk is built — screen content stays on your local network

vrdesk connects your Mac and your headset directly, peer-to-peer, over your own Wi-Fi or LAN. The Mac host announces itself on the network with a discovery beacon; the headset finds it and completes a 6-digit pairing; the desktop is then encoded as H.264 video and sent to the headset over WebRTC. There is no cloud server, no relay, and no analytics in this path. Your screen, keystrokes, mouse movements, and audio travel device-to-device on your network and reach only the headset you paired with — they never reach us.

Web edition

The web edition uses your browser's screen picker to capture only the display, window, or tab you choose. Screen video and optional shared audio travel directly between the host browser and viewer through encrypted WebRTC; vrdesk and Supabase do not receive or store those media frames. The web edition uses Supabase Realtime to exchange the temporary technical messages needed to establish that peer-to-peer connection: a random room capability, WebRTC session descriptions, ICE network candidates, connection role, and timestamps. A room exists only while its participants are connected; vrdesk does not write it to an application database. Supabase may process ordinary service metadata such as IP address and connection logs under its privacy policy. No vrdesk account, name, email, analytics profile, or recording is created.

What vrdesk collects — and what it never touches

vrdesk never collects, stores, or transmits to us any of the following: the contents of your screen, the windows or documents you have open, your keystrokes, your mouse input, audio, your files, or your browsing. There are no advertising or behavioral-tracking SDKs in vrdesk; RevenueCat provides the purchase-service analytics described below.

The only personal data vrdesk collects through Apple and RevenueCat is what's needed to identify the entitlement customer, validate purchases, and remember a Pro unlock across your own devices:

• Entitlement user identifier — a random, persistent identifier generated by the app and stored in Apple Keychain, used by RevenueCat to associate your purchases and by your Mac to synchronize Pro access. Installations upgrading from version 1.0 builds 1–3 may retain their previously stored Apple-provided identifier.
• Purchase and subscription history — Apple receipt and transaction information, products, entitlement state, renewal or expiration state, and last-seen time processed through RevenueCat. Apple handles payment-card details; neither vrdesk nor RevenueCat receives them from the app.
• Basic technical context — device type, operating system, locale, and currency code used to operate the RevenueCat purchase service. RevenueCat says it does not collect precise or coarse location for this SDK flow.

For App Store privacy disclosure purposes, vrdesk classifies User ID and Purchase History as linked to you. Both are used for App Functionality and Analytics because RevenueCat provides receipt validation, entitlements, Customer History, Charts, and Experiments. Neither category is used for advertising or cross-app tracking, and vrdesk does not collect the screen, input, audio, or file content you stream on your local network.

No account required

Version 1.0 build 4 removes Sign in with Apple and does not create a user account or request a name or email. The app generates an opaque identifier for purchase validation and shares that identifier with your Mac for Pro synchronization. Existing installations retain their previous identifier to preserve purchase history. Restore Purchases uses your App Store account to restore eligible purchases on another iPhone or iPad.

Purchases & subscriptions (RevenueCat)

vrdesk Pro is an optional auto-renewing subscription sold in the iPhone app and handled by Apple through the App Store. To validate the subscription and unlock Pro across your devices we use RevenueCat, which receives the persistent entitlement user identifier, basic device and locale context, Apple receipt and transaction information, purchase history, entitlement state, and last-seen time. vrdesk does not send your name or email, and RevenueCat never receives your payment card or the screen, input, audio, or file content you use vrdesk with. Apple handles all payment information; we never see it. RevenueCat documents the required Purchase History purposes in its Apple App Privacy guidance. See also Apple's Privacy Policy.

Mac App Store edition

The native Mac App Store edition is view-only. It contains no RevenueCat or analytics SDK and sends no purchase identifier to a server. Apple's content picker lets you select one display or window. JPEG frames and short-lived pairing tokens remain in memory and travel only to paired devices on the local network. The app does not retain recordings. Stopping sharing disconnects viewers and invalidates session tokens. This local stream is not encrypted; use a trusted network. The edition requires local network access and your selected screen/window capture, but no Accessibility permission.

Web permissions

The web edition requests Display Capture only after you press “Choose what to share.” Your browser presents its own picker, shows an active-sharing indicator, and lets you stop the capture at any time. Immersive mode requests WebXR only after you press “Enter VR” in a compatible Quest Browser.

Permissions by device

• Full direct-download Mac host — Screen Recording (required by macOS to capture your desktop for streaming) and Accessibility (to inject keyboard and mouse input coming from the headset).
• iPhone — Local Network (to find your Mac and headset on the LAN) and screen capture / ReplayKit (only if you use the phone as an extra display).
• Quest headset — Bluetooth / BLE-HID (so the headset can act as a keyboard and mouse to a paired phone) and local network access (to receive the Mac's video stream).

Every one of these is granted by you and can be revoked at any time in that device's system settings.

Third parties we rely on

vrdesk uses a small number of sub-processors, each for a single narrow purpose:

• Apple — App Store payment processing and, in older builds, Sign in with Apple.
• RevenueCat — receipt validation, purchase history, entitlement state, and purchase-service analytics so Pro unlocks across your devices.
• Meta / Horizon — an entitlement check to confirm you own the vrdesk headset app on the store.
• Supabase — transient Realtime delivery of web-edition WebRTC setup messages; it does not receive the shared screen or audio frames.

There are no advertising or behavioral-analytics SDKs. RevenueCat's purchase-service analytics are limited to its Customer History, Charts, and Experiments functions and are not used for advertising or cross-app tracking.

Retention & deletion

The native screen, input, and audio path remains on your local network and is not retained by vrdesk or RevenueCat. Web-edition screen and audio media are peer-to-peer; its Realtime setup messages are transient, while Supabase may retain operational logs under its service practices. RevenueCat retains the custom user identifier and purchase-service customer history under its service retention practices. Deleting the app removes its ordinary local container, but Apple Keychain data may persist according to platform behavior. Older installations can revoke their prior Sign in with Apple authorization in iOS Settings; this does not delete purchase history or cancel a subscription. To end billing, cancel the subscription in the App Store. To request deletion of the vrdesk customer link and data under our control, email isaiahdupree33@gmail.com and identify the request as vrdesk data deletion. Limited transaction records may remain where required for fraud prevention, accounting, disputes, or law.

Security

A native stream only starts after you enter your Mac's 6-digit pairing code in the headset, and it flows peer-to-peer on your own network. The web edition uses an unguessable 80-bit room capability and encrypted WebRTC media. Anyone who receives the complete live web room link can attempt to join that session, so share it only with the intended viewer and stop sharing when finished.

Children

These apps, including vrdesk, are not directed to children under 13 and do not knowingly collect any information from children.

Changes

If this policy changes, the updated version will be posted here with a new date.

Contact

Questions? Email isaiahdupree33@gmail.com.