Legal

Privacy Policy

Effective date: May 1, 2026  ·  Last updated: May 1, 2026

The short version: LANConsole does not collect your personal data, does not track you, and does not transmit anything to developer servers. Your credentials are stored exclusively in the iOS Keychain on your own device. All network traffic goes directly between your iPhone or iPad and your own Mac — never through any server controlled by Code There or any third party.

1 Information We Collect

LANConsole is designed from the ground up with a privacy-first architecture. We collect no personal information, no usage analytics, and no crash telemetry whatsoever. There are no analytics SDKs, no advertising identifiers, no fingerprinting, and no session recording in the app.

The only data that LANConsole stores is data that you explicitly provide when you configure a saved machine connection. This data never leaves your device to any server we control. Specifically:

  • Saved machine configurations — the display name, hostname or IP address, and port number you choose for each saved Mac. This is stored locally in iOS UserDefaults and, if iCloud sync is enabled, in iCloud Key-Value storage under your own Apple ID.
  • Usernames — the SSH or VNC username you associate with a saved machine, stored in iOS UserDefaults and optionally in iCloud Key-Value storage.
  • Passwords and SSH private keys — stored exclusively in the iOS Keychain on your device. The iOS Keychain is an encrypted, hardware-protected storage managed entirely by Apple's operating system. These credentials are never written to iCloud (iCloud Keychain sync for this app is not enabled), never transmitted to developer servers, and never logged anywhere.

We do not collect your name, email address, phone number, location, device identifiers, IP address, or any other personally identifying information.

2 How Your Data Is Stored

LANConsole uses three storage mechanisms, each chosen deliberately to maximize privacy and security:

  • iOS Keychain (credentials only): Passwords and SSH private keys are stored in the iOS Keychain with an access control policy that restricts access to this app only. The Keychain is encrypted at rest using AES-256 keys derived from your device's Secure Enclave hardware. These items are marked with the kSecAttrAccessibleWhenUnlockedThisDeviceOnly attribute, which means they are inaccessible while your device is locked and are never transferred off-device — not even in iCloud backups or device-to-device transfers.
  • iOS UserDefaults (machine configs, local): Non-sensitive machine metadata (names, hostnames, port numbers, usernames) is stored in the app's sandboxed UserDefaults container on-device. This data is isolated to the LANConsole app sandbox and cannot be read by other apps.
  • iCloud Key-Value Storage (optional, machine configs only): If your device has an active iCloud account and iCloud Drive is enabled, LANConsole may sync your saved machine list (names, hostnames, port numbers, usernames — but never passwords or SSH keys) across your devices via Apple's iCloud Key-Value storage. This data travels between your devices via Apple's encrypted iCloud infrastructure, governed by Apple's Privacy Policy. Code There never has access to this data. You can disable iCloud sync for LANConsole at any time in iOS Settings → Apple ID → iCloud.

There is no backend server, no database, and no developer-controlled cloud storage for LANConsole. We are physically incapable of accessing your credentials because they exist only on hardware we do not control.

3 Data Shared With Third Parties

LANConsole shares no data with any third party, full stop.

The app does not include any third-party advertising SDKs, analytics libraries, crash-reporting frameworks, or data-broker integrations. There are no embedded trackers of any kind. We do not sell, rent, trade, or disclose any user data to any third party for any purpose.

The only external party involved in any data flow is Apple, which handles the App Store purchase transaction and, if you opt into iCloud sync, the replication of your machine list across your devices. Both of these interactions are governed by Apple's own Privacy Policy, which is independent of this policy.

4 iCloud Usage

LANConsole uses Apple's iCloud Key-Value (KV) storage API for one limited purpose: synchronizing your saved machine list (display names, hostnames, port numbers, and usernames) across iOS and iPadOS devices signed into the same Apple ID. This makes it convenient to set up LANConsole on your iPad after already configuring it on your iPhone, for example.

What is synced via iCloud KV: Machine display names, hostnames/IP addresses, port numbers, and SSH/VNC usernames.

What is never synced via iCloud KV: Passwords, SSH private keys, or any authentication credentials. Credentials live only in the iOS Keychain on each individual device and are explicitly excluded from iCloud sync.

Apple's infrastructure encrypts iCloud KV data in transit and at rest. You can review Apple's iCloud data practices at apple.com/legal/privacy. To disable iCloud sync for LANConsole entirely, go to Settings → [your name] → iCloud → Apps Using iCloud and toggle off LANConsole.

5 Network Connections

When you initiate a VNC or SSH session in LANConsole, the app opens a direct TCP connection from your iOS device to the IP address and port you have configured for your Mac. This connection travels exclusively over your local area network (LAN) or, if you have set up a VPN or SSH tunnel on your own infrastructure, over that encrypted channel.

LANConsole makes no outbound connections to any server owned or operated by Code There. There is no relay server, no proxy, no analytics endpoint, and no telemetry beacon. The only hosts your device connects to are the Mac computers you configure.

During a VNC session, the screen content, mouse events, and keyboard events you transmit are encrypted according to the VNC (RFB 3.8) authentication and optional encryption negotiated between your iOS device and your Mac's VNC server. During an SSH session, all data — including terminal output, keystrokes, SFTP file transfers, and port-forwarding traffic — is encrypted by the SSH protocol (SSH-2) and goes directly to your Mac.

Clipboard content, file transfers via SFTP, and any other data handled by the app during a live session is conveyed only between your iOS device and your Mac. None of it passes through or is stored by any infrastructure under our control.

6 Children's Privacy

LANConsole is not directed at children under the age of 13. The app is a technical utility intended for use by adults or older teenagers who administer or own Mac computers. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe your child has provided information to us, please contact us at [email protected]. Because we do not collect personal information from anyone, this concern is largely theoretical, but we take it seriously and will investigate any such report promptly.

This policy is consistent with the Children's Online Privacy Protection Act (COPPA) and Apple's App Store guidelines for apps not directed at children.

7 Your Rights and Data Deletion

Because LANConsole does not collect or store personal data on developer-controlled servers, there is no database for us to query or delete records from on your behalf. All data is on your own device or under your own Apple ID.

You have complete, unilateral control over all data associated with LANConsole:

  • Delete all app data: Uninstall LANConsole from your device. iOS will delete the app's UserDefaults container and its Keychain items (items scoped to the app) automatically upon deletion.
  • Delete iCloud synced data: Disable iCloud sync for the app in iOS Settings as described in Section 4. Any data already written to iCloud KV will be removed when the app is deleted.
  • Revoke individual credentials: Within the app, you can delete any saved machine connection, which removes the associated Keychain entries for that machine's credentials.

Residents of the European Economic Area (EEA), the United Kingdom, and California have additional rights under GDPR, UK GDPR, and the CCPA respectively. Given that we collect no personal data, the practical exercise of these rights (access, rectification, erasure, portability) is fully satisfied by the controls described above. If you have questions, contact us at [email protected].

8 Changes to This Policy

We will update this Privacy Policy if the app's data practices materially change — for example, if a future version introduces optional cloud features or changes how credentials are stored. When we make a material change, we will update the "Last updated" date at the top of this page and, where required by law, notify users through the App Store update notes or a notice within the app.

We encourage you to review this page periodically. Continued use of LANConsole after a policy update constitutes acceptance of the revised policy. If you disagree with a material change, you may discontinue using the app and delete it from your device.

Minor updates (such as clarifications, formatting changes, or corrections that do not alter the substance of our data practices) may be made without advance notice.

9 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or LANConsole's data practices, please contact us:

We read every email and typically respond within 24–48 hours.