Privacy Policy

Last updated November 13, 2026

Portal I/O (the iPhone, iPad and Mac apps, the website portalio.app and the services at api.portalio.app and relay.portalio.app) is published by Nicholas Colby (“we”). This policy explains what information Portal I/O handles. In short: we never see your screen, your keystrokes, your clipboard or your pairing keys, and we don't track you.

Remote sessions

When you control a Mac, the picture, your taps, keystrokes and clipboard travel encrypted (TLS) between your device and your Mac, using a key derived from the Mac's pairing key, which only your devices hold. When your devices can't reach each other directly, the Portal I/O relay passes the already-encrypted data along. The relay cannot decrypt it and does not store it. It keeps only short technical logs (for example the time a session started and how much data passed) to keep the service running, and deletes them within 30 days.

If you create an account (optional)

• Sign in with Apple: we receive a user identifier from Apple and, if you choose to share it, your email address (which may be a private relay address).
• Your Macs: the names you give them, their network addresses and port, and which relay they use, so your Macs appear on your other devices.
• Your devices: each signed-in device's name and type, and a session token (we store only a one-way hash of it).
• Approving a new device: the new device's public key and the pairing key sealed so only that device can open it. These are deleted when the request is completed or after one hour.

We use this information only to provide Portal I/O. We do not sell it, share it for advertising, or use it to track you.

On your devices

Saved Macs, settings and pairing keys are stored on your devices (pairing keys in the Keychain). If you use iCloud Keychain, your Macs and their keys sync between your own devices through Apple's end-to-end encrypted iCloud Keychain; we can't read it. An optional saved Mac password for one-tap unlock never leaves the device it's saved on.

What we don't collect

No analytics, advertising identifiers, location, contacts, photos or crash reports are collected by Portal I/O.

Service providers

Account data is stored with Cloudflare (United States). The relay runs on Oracle Cloud (United States). These providers process data only to run the service.

Deleting your data

In the app: Settings → Delete Account. This immediately deletes your account, your saved Macs list and all sessions from our servers. Data on your devices stays until you remove the app or the Macs.

Children

Portal I/O is not directed to children under 13 and we don't knowingly collect their information.

Your rights

Depending on where you live (for example California or the EU), you may have the right to access, correct or delete your information. Deleting your account in the app does this; you can also email us.

Changes and contact

We'll post any changes here and update the date above. Questions: support@portalio.app.