Privacy — SuperDuck for iPhone
The short version: the phone app is a window onto the SuperDuck on your Mac. It shows the words; your Mac does the thinking. Between them is a relay that only ever sees encrypted text.
What the app does with your data
Messages are encrypted on your phone with a key that came from your Mac inside the QR code, sent to our relay, and decrypted on your Mac. Replies come back the same way. A copy of the conversation is kept on the phone so it can show it to you; delete the room and it is gone.
The camera is used only to scan the code on your Mac's screen (or a link someone sent you). Nothing is captured or kept.
Voice is turned into text by Apple's on-device speech recognition, on the phone. Audio is not recorded or sent anywhere.
Your name, as you type it when you join, is shown to the other members of the room (your Mac, and anyone you shared the code with). It goes nowhere else.
What leaves your phone
- The relay (relay.aimeru.com) forwards encrypted messages between your phone and your Mac. It cannot read them. It keeps an encrypted copy of recent messages for about a day so a device that was off can catch up, then discards it. It knows connection times and IP addresses, as any server does. It has no accounts and stores no names.
That is the only connection the app makes. There is no account, no login, no analytics, no crash reporting, and no telemetry. The app does not know who you are.
The code is the key
The QR code, and the link it contains, hold the key to the conversation. Anyone who has it can join and read what is said. Share it only with people you would let read your messages. Unpairing on the Mac closes the room; a new code makes a new one.
Children
The app is not directed at children. It has no content of its own; what it shows comes from the Mac it is paired with.
Changes
If this policy changes, the date at the top changes.
Contact
sd@superduck.ai. A person reads it.