Privacy
Privacy Policy
Last updated 13 November 2026
The short version: Duotop has no account, and everything between your Mac and your device is encrypted end to end. On your own network the two connect directly. Away from it, the connection can go through Duotop's relay, which passes encrypted data it cannot read. We cannot see your screen, your keystrokes, your sound or your clipboard.
What the apps do with your data
Your screen, sound, input and clipboard
During a session, your Mac sends its picture and sound to your iPhone or iPad, and your device sends back touches, keys and clipboard text. This is encrypted end to end with keys your two devices exchanged when you paired them, and it is not stored on any server of ours.
On the same network, over Tailscale, or when you type your Mac's address, the two devices connect directly and nothing passes through us. On any other connection (a Pro feature), the encrypted stream passes through Duotop's relay server, described next.
The relay
The relay only passes encrypted bytes between your Mac and your device. It does not have the keys, so it cannot see your screen, sound, typing or clipboard.
The relay does see:
- the IP addresses of your Mac and your device,
- your Mac's public key, which works as an identifier for that Mac,
- when connections are made and how much data passes.
It keeps monthly totals of traffic and of the number of sessions. There is no account behind any of this.
To set up a link straight between your device and your Mac, each asks the relay which address and port its router shows to the outside, and the relay answers. That question carries nothing else and is not recorded. When the straight link opens, the session leaves the relay.
A Mac with Reach from anywhere switched on keeps one idle connection to the relay so that your devices can find it. The switch is in the Mac app's menu and is on by default, including for people who do not have Pro. To stop your Mac contacting the relay, turn Reach from anywhere off. Duotop then works on your own network, over Tailscale or by a typed address, always connecting directly.
Pairing
When you pair, each device stores the other's name and a public identity key so they can recognise each other next time. These stay on your devices. Removing a device or deleting the app removes them.
Accounts, analytics and advertising
There is no Duotop account. The apps contain no advertising and no third-party analytics or tracking software, and we do not build a profile of you.
Agent tools
If you turn on agent tools on your Mac, an agent on that Mac can see the screen and send clicks and keys through an endpoint that only answers on the Mac itself. Duotop keeps a log of these calls on your Mac. Typed text is never written to the log. What the agent's own maker does with what the agent sees is covered by that maker's privacy policy, not this one.
Permissions the apps ask for
- Local Network (iPhone, iPad and Mac): to find your Mac on your own network and connect to it directly.
- Screen Recording (Mac): to send the Mac's picture and sound to devices you have paired.
- Accessibility (Mac): so your taps, trackpad and keys reach the apps on your Mac.
Purchases
Duotop Pro is sold through Apple's In-App Purchase. Apple processes the payment and we never see your card details. The app checks with Apple whether Pro is active. Apple may give us totals and summaries about sales that do not identify you.
TestFlight and the App Store
If you test Duotop through TestFlight or install it from the App Store, Apple may share crash reports and usage statistics with us, depending on your sharing settings, and any feedback you choose to send. Apple's privacy policy applies to what Apple collects.
This website
This site is a set of static pages. It sets no cookies, loads nothing from third parties and runs no analytics. Like any web server, ours keeps short-lived access logs (IP address, time, page requested, browser type) to keep the site running and to stop abuse.
Children
Duotop is a general-purpose utility and is not directed at children. We do not knowingly collect personal information from anyone.
Changes
If this policy changes, we will post the new version here and change the date at the top.
Contact
Questions about privacy can be sent to [email protected].