Mac Remote for Android — Privacy Policy

Effective date: 16 October 2026
Publisher: NEX APP STUDIO LLC

This policy covers the native Android app “Remote Control for Mac – Nex” (package com.macremotecontrol.app). It does not cover the separate browser viewer, website accounts, waitlist, or web relay.

Direct connections and information handled

The app connects directly to the computer or VNC server whose address you enter. That computer receives the authentication details, keyboard input, pointer input and clipboard text needed to provide the session. Screen pixels and clipboard text travel between your Android device and the selected computer. Only connect to computers you own or are authorized to access.

NEX APP STUDIO LLC does not operate a relay for the native Android app and does not receive your credentials, remote-screen content or session input. The app has no advertising, tracking, crash-upload or billing SDK, and does not require a publisher account.

Usage analytics and notifications

From version 1.0.2 the app uses Google Firebase Analytics to understand how the app is used. It records app opens, sessions, time in the app, app version, device model, operating-system version and approximate country, plus a few app events: that a connection succeeded (with its security type, for example “VeNCrypt X509Plain”, and whether the computer is a Mac), that a connection attempt failed (only the type of error), and that a screenshot was saved. These events are tied to a random app-instance identifier, not to your name, email or Google account. They never include computer names, addresses, usernames, passwords, keyboard or clipboard content, or screen content. The app does not use the advertising ID.

The app uses Firebase Cloud Messaging to receive occasional announcements from us, such as news about updates. Firebase assigns the app a messaging token for this; we do not store it on our own servers. Android 13 and later shows these messages only if you allow notifications, and you can turn off the “News and tips” channel in Android’s app notification settings.

Google processes this data for us as a service provider under the Firebase privacy and security terms. Analytics data is retained for up to 14 months.

Storage on your Android device

Computer names, host addresses, usernames, settings, certificate fingerprints and connection history are stored in app-private storage. Saved passwords are encrypted using an AES-256-GCM key held in Android Keystore. App backups and device transfer are disabled. Removing a computer deletes its saved connection details, encrypted password, certificate pin and screen preview.

Last-screen previews are enabled by default and saved in app-private, no-backup storage when a session ends or goes into the background. You can turn them off in Help → Privacy or Computers → More options → Last-screen previews. Turning them off deletes existing previews.

Clipboard and screenshots

Clipboard sharing is enabled in both directions by default. The app reads phone clipboard text while the session has focus, after clipboard changes or when you select Send phone clipboard, and sends it directly to your selected computer. Remote clipboard text can be placed on the phone clipboard. In the session’s More menu, choose Clipboard sharing → To computer or Off. Off prevents reading or changing the phone clipboard. Clipboard contents are not uploaded to the publisher.

When you choose Save screenshot to phone, the remote framebuffer is saved as a PNG in the device gallery under Pictures/VNC Client. You may choose View or Share; sharing sends the selected screenshot to the app or recipient you choose. Gallery files remain after deleting a connection profile or uninstalling the app. Delete them using your gallery or file manager. They follow any gallery backup settings you enable.

Permissions and background sessions

Internet access is used for the requested direct connection. An active session uses a foreground service so it can remain connected when you switch apps. Screen update requests pause while the app is in the background. The connection ends when you disconnect, the server closes it, or a network error occurs. The optional notification lets you return to the session or disconnect. Android 13 and later asks for permission to show this notification.

Android 8 and 9 asks for storage permission only when saving a screenshot. Android 10 and later uses MediaStore to save screenshots without broad storage access. The app does not request location, contacts, camera, microphone, accessibility-service or VPN permissions.

Connection security

Classic VNC and standard Mac Screen Sharing do not encrypt screen, keyboard or clipboard traffic. Authentication does not by itself make the session encrypted. Use them only on a trusted local network, VPN, or an externally configured secure tunnel. Compatible VeNCrypt X509 servers use TLS and a certificate fingerprint you verify and pin; a changed certificate blocks the connection.

The practice desktop is simulated and runs only on the device’s IPv4 loopback interface. It needs no external computer, account or credentials and does not forward clipboard contents.

Support, deletion and changes

You can remove saved computers, turn off previews, disable clipboard sharing, and delete gallery screenshots on your device. Data entered into your remote computer must be managed on that computer. If you contact support, we receive the information you choose to send and use it to answer your request. Avoid sending passwords or private screen content. Ask us to delete support correspondence by emailing mail@macremotecontrol.com.

We will update this policy if the native Android app’s practices change. Contact: mail@macremotecontrol.com.