Shellcove Privacy Policy

Shellcove 完全在你自己的设备上运行——iPhone / iPad 和你配对的那台 Mac。数据只在两者之间通过你的本地网络、Tailscale 或其它两端互通的 VPN 传输，全程 TLS 加密。我们没有云端服务器、没有账号系统、不收集统计数据。除非你主动通过邮件联系我们，否则我们看不到任何关于你使用 Shellcove 的信息。

Shellcove runs entirely on your own devices — your iPhone / iPad and the paired Mac. Data only flows between them over your local network, Tailscale, or another VPN where both ends can reach each other, encrypted with TLS. We have no cloud server, no account system, and collect no analytics. Unless you proactively contact us by email, we have no visibility into your use of Shellcove.

Shellcove 不收集、存储或传输任何用户个人信息。使用本应用无需注册账号或登录，我们不会收集你的姓名、电子邮件、位置信息或任何其他个人身份信息。本应用没有任何第三方分析、广告或追踪 SDK。

Shellcove does not collect, store, or transmit any personal information. No account registration or sign-in is required. We do not collect your name, email address, location, or any other personally identifiable information. The app contains no third-party analytics, advertising, or tracking SDKs.

所有 Shellcove 收发的内容（你按下的键、文本输入、鼠标事件、Mac 屏幕的实时投屏画面、窗口文本、剪贴板）都只在你的 iPhone / iPad 和配对 Mac 之间传输，使用自签 TLS 证书 + 证书钉扎 + 客户端认证保护。这些内容不会经过任何外部服务器或云端服务，也不会写入到任何第三方存储。

文本输入由系统键盘或你选择的输入法生成。你可以使用 iOS 听写或第三方输入法，但 Shellcove 只接收输入框里的最终文本并发送给配对 Mac；Shellcove App 本身不请求麦克风权限，也不请求 Speech Recognition 权限。

Everything Shellcove sends or receives — keystrokes, text input, mouse events, the live mirror of the Mac screen, Window Text, and the clipboard — moves only between your iPhone / iPad and the paired Mac, protected by a self-signed TLS certificate, certificate pinning, and client authentication. None of it ever passes through any external server or cloud service, and nothing is written to any third-party storage.

Text input is produced by the system keyboard or the input method you choose. You may use iOS Dictation or a third-party keyboard, but Shellcove receives only the final text in its input field and forwards that text to the paired Mac. The Shellcove app itself does not request Microphone or Speech Recognition permission.

• 相机：仅用于扫描 Mac 上显示的配对二维码。除了扫描那一刻，相机不会启动。
• 本地网络：用于与配对的 Mac 建立 TLS 连接。这是 Shellcove 的核心功能必须的权限。

Mac 端需要你手动授予「辅助功能」（注入键盘、鼠标、文本）和「屏幕录制」（远程桌面捕获）。Shellcove iOS App 不请求麦克风、语音识别、位置、通讯录、相册、健康、运动、蓝牙、Face ID 或任何其他敏感权限。

• Camera: only used to scan the pairing QR code shown on your Mac. Outside that moment, the camera is not active.
• Local Network: required to establish the TLS connection to the paired Mac. Core functionality depends on this.

On Mac, you manually grant Accessibility (to inject keyboard, mouse, and text input) and Screen Recording (to capture Remote Desktop). The Shellcove iOS app does not request Microphone, Speech Recognition, location, contacts, photos, health, motion, Bluetooth, Face ID, or any other sensitive data.

Shellcove 在 iPhone / iPad 上只保存配对 Mac 的连接信息：设备名、endpoint 地址和端口、证书指纹、协议版本以及配对 token，写在系统标准的 UserDefaults 里。在 iOS 设置里点击"Forget Device"会立即删除这条记录。

Mac 端在 ~/Library/Application Support/Shellcove/ 目录下保存自签 TLS 证书（PEM 格式的公钥和私钥）、监听端口记录，并在系统偏好存储每台 Mac 独有的客户端认证 token。删除该目录或在 Mac 端重置即可让所有 iPhone / iPad 重新配对。

On iPhone / iPad, Shellcove stores only the paired Mac connection record: device name, endpoint host/port values, certificate fingerprint, protocol version, and pairing token, written to the standard system UserDefaults. Tapping "Forget Device" in iOS Settings immediately removes this record.

On the Mac, the self-signed TLS certificate (PEM-formatted public and private keys), listener port record, and per-install client-auth token live in local application support / preferences storage. Deleting or resetting those local records forces every iPhone / iPad to re-pair.

Shellcove 不面向 13 岁以下儿童，不会有意收集儿童数据。鉴于本应用不收集任何用户数据，对各年龄段用户均无数据相关风险。

Shellcove is not directed at children under 13 and does not knowingly collect data from children. Since the app collects no user data at all, this poses no data-related risk to any age group.

如果本隐私政策有变更，我们会更新本页顶部的"生效日期"。如果变更涉及数据处理方式的实质改变，新版本发布时会在更新说明中明确告知。

If this privacy policy changes, we update the "Effective date" at the top of this page. Substantive changes to how data is handled will be highlighted in the corresponding app release notes.

对隐私问题有任何疑问，请发邮件到 [email protected]。

Privacy questions: [email protected].