Mighty Remote

Privacy policy

Last updated: November 2026

Mighty Remote is an iPhone and iPad app that controls your computer, plus the desktop apps for macOS, Windows and Linux that it connects to. It has no accounts and no Mighty cloud. This page explains what data is involved, why, and what you can do about it.

The short version

  • What you type, see and hear goes straight between your iPhone and your computer, encrypted. We cannot read it.
  • We do not have accounts, sell data, show ads or track you across apps and websites.
  • The iPhone app uses Superwall for the paywall and purchases. The desktop apps have no analytics.
  • Optional features (remote connections, Tailscale, iCloud) involve the services listed below, only when you use them.

Who is responsible

The controller of your data is Iván José Martín García. For anything about privacy, write to support@mightyremote.app.

Your sessions

Pointer movement, keystrokes, dictated text, the screen, audio, files and clipboard contents travel between your iPhone and the paired computer over an encrypted connection pinned to that computer. They are not sent to us or stored by us.

Dictation is recognised on your iPhone; only the resulting text is sent to your computer. The clipboard history and the optional unlock password stay on your iPhone, and the password is not shared through iCloud.

Pairing keys and the list of paired devices are stored on your devices. You can revoke any device from the desktop app.

Purchases and the paywall (iPhone app)

Purchases are made and billed by Apple; we never see your payment details. The paywall is provided by Superwall, the only third-party SDK in the app. Superwall receives purchase and subscription status, a few app events (pairing, start and end of the trial), and technical data such as an app-specific identifier, device model, OS version, country and language. It does not receive anything from your sessions. See Superwall’s privacy policy: superwall.com/privacy

Connections outside your network (optional)

If you turn on “Allow connections from outside this network” on a computer, your iPhone and that computer use our connection service, hosted on Cloudflare, to find each other and, when no direct path exists, to relay their traffic. The service sees the computer’s certificate and public IP address while it is online, your iPhone’s public device key and IP address, and how much traffic is relayed. Traffic stays end-to-end encrypted, so the service cannot read or alter it. It keeps nothing once the connection ends and keeps no request logs.

The desktop app may also ask your router to open a port (UPnP, NAT-PMP or PCP), and both sides ask a public STUN server for their public address.

Tailscale (optional)

If you sign in to Tailscale in Mighty, your devices join your own Tailscale network. Tailscale processes that sign-in, coordinates the connection, relays encrypted packets when needed and receives its client’s diagnostic logs, under your agreement with Tailscale and its privacy policy: tailscale.com/privacy-policy. We do not receive your Tailscale account details.

Finding your Macs through iCloud

With “Find computers through iCloud” on (the default, and you can turn it off on either side), your Macs publish where to find them and which certificate to trust in your own iCloud storage, and your iPhone reads it. Apple carries this between your devices; it never reaches us.

Updates (desktop apps)

The desktop apps check cdn.mightyremote.app for new versions every few hours and download them from there. Like any web request, this reveals your IP address and app version to our host, Cloudflare. We keep no logs of these requests. The desktop apps contain no analytics or crash reporting.

Support emails

If you write to us, we use your email address and what you send to answer you and to help you with later questions.

This website

mightyremote.app has no cookies, analytics, ads or third-party scripts, and stores nothing in your browser. It and the downloads are served by Cloudflare, which processes the technical data needed to deliver them (such as your IP address) for security and delivery. See Cloudflare’s privacy policy: www.cloudflare.com/privacypolicy

Legal basis

  • Providing the app and the features you turn on: performance of our contract with you.
  • Purchases and the paywall, updates, security and abuse limits of the connection service: our legitimate interest in running and protecting Mighty.
  • Answering your emails: your request and our legitimate interest in helping you.
  • Legal obligations, such as tax records of purchases kept by Apple.

Service providers and international transfers

The providers above (Apple, Superwall, Cloudflare and, if you use it, Tailscale) may process data outside the European Economic Area, including in the United States. Where they do, the transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You can ask to access, correct, delete or port your data, and to restrict or object to its processing, by writing to support@mightyremote.app. Because we have no accounts, most data never reaches us: deleting the app and the desktop app removes what is stored on your devices. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or the authority where you live.

Children

Mighty is not directed at children under 14, and we do not knowingly collect their data.

Changes

If this policy changes, the date at the top changes too.