Your work is personal.
It should stay that way.

Privacy at a glance.

This policy describes the end-to-end encrypted release of TapCue for iPhone and Mac, its managed relay service, and this website. TapCue is developed and operated by LunarTear Studio LLC (“we”, “us”, or “our”).

• Private between your devices.

  Session content is encrypted on the sending device and decrypted on your paired device. Our relay does not hold the keys needed to read it.

• Your Mac remains the workspace.

  Codex runs on your Mac. Messages, outputs, and changes you view travel to your iPhone; your configured AI services may also process task content.

• No advertising. No tracking.

  We do not sell personal data, use it for targeted advertising, or track you across other companies’ apps and websites.

01 / The connection

One private conversation.
Between your iPhone and Mac.

The encrypted channel runs from your iPhone to your paired Mac. The Singapore relay passes encrypted messages between them. It is a transport service, not a place where your session content is decrypted. The paired devices hold the keys; the relay does not receive those keys.

End-to-end encryption covers the session messages, instructions, outputs, file changes, and approval requests transmitted through this channel. Network encryption also protects the connections to the relay. Encryption does not conceal every connection detail: the service still processes routing and security metadata described below.

The managed relay is located in Singapore. If you connect from another country, encrypted traffic and connection metadata are transferred there. A self-hosted relay uses the location and infrastructure selected by its operator. A direct local or VPN connection does not pass through our managed relay.

This protection applies to the connection between your paired devices. It does not extend to content after you share it with support, export it, or send it from your Mac to Codex, a model provider, or a connected tool.

02 / Data collection & use

What is processed, and why.

TapCue processes only the information needed to connect your devices, show your sessions, carry out your requests, maintain the service, and respond when you contact us.

We do not include advertising SDKs or third-party behavioral analytics in TapCue. We do not use your session content to train our own AI models. Your chosen AI provider’s processing and training settings are governed separately by that provider.

03 / Permissions

You choose what to allow.

Camera

Used when you scan a Mac’s pairing code. TapCue does not upload the camera feed to our relay or keep it as a recording.

Local network

Used to connect to a Mac on your local network. Denying it can prevent local pairing and sessions.

Microphone & speech

Optional voice input turns speech into an editable draft on supported devices. Recording begins when you choose voice input, and you decide when to send the text. Apple’s speech and keyboard dictation services follow your system settings and Apple’s policies.

Selected photos or files

Only items you choose to attach are included in your request. Sending an attachment shares it with your Mac and, as needed for your task, the AI services configured there.

Change camera, microphone, and local network permissions in iPhone Settings → Apps → TapCue. Turning off an optional permission does not prevent you from using unrelated features. Pairing credentials are stored in the iPhone Keychain.

04 / Third parties

The services involved.

Your Codex and AI setup. TapCue sends your instructions to Codex on your Mac. Codex, your selected model provider, and tools or integrations you enable may process prompts, code, attachments, outputs, and other task context. This is separate from the TapCue relay. Review those services and their permissions before sending confidential information.

Service providers. We use infrastructure and email/support providers to run the relay, deliver this website, and respond to you. They may process the connection metadata or support information needed for those services. We require providers acting on our behalf to protect personal data to the same or an equivalent standard described in this policy, restrict use to the contracted purpose, and maintain appropriate security.

Apple. App distribution, device permissions, Keychain, and optional system speech features involve Apple services. Apple processes information under its own policies and your settings.

Legal and security requests. We may disclose information we hold when legally required, to protect users and the service, or to establish or defend legal rights. We cannot provide decrypted session content that our relay cannot access.

You choose your AI providers and integrations. Read the OpenAI Privacy Policy and Apple Privacy Policy where those services apply. TapCue is independent of OpenAI.

05 / Retention & deletion

Keep what you need.
Remove what you don’t.

Relayed content. Encrypted session payloads are forwarded in real time and are not stored as a conversation archive on the relay. Temporary transmission buffers are released when they are no longer needed for delivery. Your devices, rather than the relay, manage session history and reconnection.

Device and connection records. Relay registrations and authentication records are retained while needed to route and secure your connection. Revoking access disables the connection; it does not automatically erase all registration or security records. Contact us to request removal of managed-relay records. We delete or de-identify records when they are no longer needed for service operation, security investigations, or legal obligations.

On your devices. Local configuration, cached summaries, and drafts remain until you remove them or the app clears or replaces them. Removing a paired Mac on iPhone clears the local data and credentials for that connection. It does not erase the Mac’s Codex history, project files, or device backups. On your Mac, revoke a paired device to terminate access and manage session history and files using your local tools. Archiving a session is not permanent deletion.

Support requests. We retain your correspondence and voluntarily supplied attachments while handling the request and any necessary follow-up, then delete or de-identify information no longer needed. You may request earlier deletion. We may retain limited records where required to resolve a dispute, prevent abuse, or meet legal obligations, and will explain any applicable limitation.

Logs and backups. Operational logs are retained only as needed to maintain security and troubleshoot service issues, then deleted or rotated. Backups may retain removed records until they expire under the operator’s backup cycle and are not used for ordinary processing. Self-hosted relay records and backups are controlled by their operator; contact that operator for deletion.

06 / Your choices

You remain in control.

• Choose which Macs and projects to connect and which content to send.
• Decline a requested action, stop a task, or revoke a paired device from your Mac.
• Turn off optional permissions in system settings or stop using the relay.
• Ask us to access, correct, delete, or provide a copy of personal information we hold about you.
• Where applicable, object to or restrict processing, withdraw consent, or complain to your local data protection authority.

Send requests to [email protected]. Describe your request without including secrets or private code. We may ask for limited information to verify that you are entitled to the data. We respond within the period required by applicable law and explain any records we must retain. Withdrawing consent does not undo processing already carried out lawfully.

TapCue’s device-pairing flow does not create a TapCue account. You can disconnect devices and request removal of service records without an account-deletion flow. We cannot remotely erase data held exclusively on your Mac, iPhone, backups, or independently chosen third-party services.

Where a legal basis is required, we process information to provide the service you request, with your consent for optional submissions and permissions, for legitimate interests in service security and support, or to meet legal obligations, as applicable.

07 / This website

A simple website.

This website uses no advertising or analytics cookies, tracking pixels, third-party font requests, or browser-based profiling. Its navigation does not require an account, and it does not store your browsing history in local storage.

The hosting infrastructure necessarily processes your IP address, requested URL, browser information, request time, and response status to deliver pages and protect the service. Any operational access logs are used for those purposes and handled under the retention principles above. Following a support link or sending an email takes you to the relevant service, whose own data practices also apply.

TapCue is a developer tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us so we can address it.

08 / Contact & updates

Questions are welcome.

For questions about this policy, a privacy concern, or a data request, contact:

We update this policy when our practices change and revise the date above. For material changes, we provide appropriate notice and obtain consent where required before new processing begins.