Privacy policy

For Duo Screen on iPhone and iPad, and Duo Screen Host on Mac. Effective November 14, 2026; last updated November 14, 2026.

In short: the apps don’t collect personal data. Your screen and what you type go only between your own devices, encrypted. If you turn on remote access and a direct connection isn’t possible, they pass through our relay, still encrypted end to end, so we can’t read them.

Metahuman Network LLC (“we”, “us”) makes Duo Screen for iPhone and iPad and Duo Screen Host for Mac. This policy explains what happens to your information when you use them.

What the apps do with your information

Duo Screen shows the screen of your Mac on your iPhone or iPad, and sends your taps, trackpad gestures and key presses back to the Mac. Unless you turn on remote access, that video and input travel only between your own devices, over your local network or a direct peer‑to‑peer Wi‑Fi connection, and never reach a server. The apps don’t record or save what’s on your screen.

Remote access, if you turn it on

Remote access lets a paired iPhone or iPad reach your Mac when they aren’t on the same network. It’s off until you turn on Remote access in Duo Screen Host and tick Remote for each device you want to allow. While it’s on, your Mac keeps a connection open to a relay server that Metahuman Network runs, at relay.duoscreen.metahuman.network, so your device can find it.

• First through the relay, then directly. Your device first connects to your Mac through the relay. Inside that end‑to‑end encrypted session, the two swap their addresses and try to connect to each other directly. If that works, your screen and input go straight between them and the relay connection closes. The relay carries the session only when a direct connection isn’t possible.
• Encrypted end to end either way. Video and input are encrypted between your device and your Mac with keys from your pairing, over the relay and over the direct connection. The relay, and we, can’t read, change or replay them, and never see your pairing keys.
• Finding your address. To try a direct connection, each app asks the relay server for its public address (a STUN request, on UDP port 3478). That service sees the public IP address and port the request came from only to answer it, and doesn’t store or log them.
• What the relay uses while you’re connected: the IP addresses of your Mac and your device, a random ID for your Mac and one for your device, to connect the two and to limit abuse, such as too many attempts from one address. It holds them in memory only while needed and doesn’t write them to its logs.
• What the relay keeps: logs with no identifiers in them: no IP addresses and no device or relay IDs, only when Macs connect and sessions start and end, how long sessions last and why they end. The relay’s web server keeps no access log. If it fails badly, it writes a short error report, which can include the address of the connection involved; those reports are deleted after 14 days.
• Nothing else is stored. There are no accounts, and the relay keeps no screen content, input or keys.
• Pairing never happens remotely. A device can only pair in person, on the same network as the Mac, with a code you approve there.

To stop remote access, turn off Remote access in Duo Screen Host, or untick Remote for a device.

Information we collect

We don’t collect personal information through the apps. They have no accounts, analytics, advertising or third‑party tracking tools, and we don’t track you across other apps or websites. The only personal data our servers handle is the IP addresses the relay uses briefly when you use remote access, described above, and they aren’t kept.

Information stored on your devices

To remember which devices you’ve paired, the apps keep a little information on your own devices:

• On your iPhone or iPad: the Macs you’ve paired with, the keys that encrypt those connections (in the keychain), each Mac’s relay ID if it allows remote access, a random ID for your device, the device name you choose, and your settings, such as quality and text size.
• On your Mac: the iPhone and iPad devices you’ve paired, which of them may use remote access, their keys and the Mac’s relay identity (in the keychain), and Duo Screen Host’s settings.

This information stays on your devices and isn’t sent to us.

Removing your information

To remove a pairing, choose Forget This Mac in Duo Screen, or Remove next to the device in Duo Screen Host. Remove All Devices in Duo Screen Host also replaces the Mac’s pairing key and its relay identity, so every old pairing stops working, locally and through the relay. Deleting the apps removes their settings.

Permissions

• Local Network (iPhone, iPad and Mac): to find your Mac and connect to it on your network.
• Screen Recording (Mac): so Duo Screen Host can send your screen to your iPhone or iPad.
• Accessibility (Mac): so taps, gestures and key presses from your iPhone or iPad can control your Mac.

You can turn these off at any time in Settings on iPhone or iPad, or in System Settings on Mac. The features that depend on them stop working until you turn them back on.

Security

Pairing needs your approval, in person: a 6‑digit code appears on both devices, and you approve it on your Mac. After the first device, the Mac only accepts new pairings for five minutes after you click Pair New Device. Every connection is then encrypted with keys from that pairing: with TLS on your network, and end to end through the relay or over a direct connection made with its help. Devices that haven’t been paired, or that you’ve removed, can’t connect.

Crash reports from Apple

If you’ve chosen to share analytics with app developers in your device’s settings, Apple may send us crash reports and basic diagnostics for these apps. Apple handles this under its own privacy policy, and the reports don’t include your name or contact details. You can turn this off in Settings › Privacy & Security › Analytics & Improvements.

This website

This site, duoscreen.metahuman.network, has no cookies, analytics or trackers, and loads nothing from other servers. Its web server keeps a standard access log of each request: the IP address it came from, the time, the page asked for, the page that linked to it, and the browser’s name and version (its user agent). These logs are kept for about two weeks, then deleted. We use them only to keep the site running and secure, never to identify or track you, and we don’t share them. This is separate from the relay, which keeps no such log.

Contacting us

If you email us, we receive your email address and whatever you include, and we use it only to reply. We delete support emails when they’re no longer needed to help you, or sooner if you ask.

Children

The apps aren’t directed at children under 13, and they don’t collect personal information from anyone, including children.

Your rights

Privacy laws such as the GDPR, the UK GDPR and the California Consumer Privacy Act give you rights to access, correct, export and delete your personal data.

• The only personal data we process from the apps is the IP addresses the relay and its STUN service use briefly while you connect remotely. We process them to provide the connection you asked for (GDPR Article 6(1)(b)) and to protect the service from abuse (Article 6(1)(f)).
• Because nothing is stored, there’s nothing for us to give you or delete afterwards. The information on your own devices is under your control.
• We don’t sell or share personal information.

If you’ve emailed us and want that correspondence deleted, write to support@metahuman.network. You can also complain to your local data protection authority.

Changes to this policy

If our practices change, for example if we add crash reporting or update checks, or the relay starts keeping anything new, we’ll update this policy and the date above before the change reaches the apps.

Contact

Metahuman Network LLC
support@metahuman.network