Effective 8 October 2026
The short version
Sidekey does not collect, store or share your personal data. It has no accounts, no analytics, no advertising and no tracking, and it includes no third-party code that does. Sidekey on your iPad or iPhone talks only to Sidekey on a Mac, over USB or your local network; nothing is sent to the developer or to any server on the internet.
Pairing
Before an iPad or iPhone can see or control your Mac, you pair them: the Mac shows a 6-digit code for two minutes when you choose Pair Device in its Sidekey menu, and you type it on the iPad or iPhone. Until then the Mac sends that device only its name and a pairing request, and runs none of its taps. Before it has paired, the device connects to the first Sidekey Mac it finds and sends it the device's name and an identifier; after pairing it looks only for the Mac it paired with. Pairing creates a random token that each side keeps in its Keychain; later connections prove the token without sending it again. To revoke a pairing, choose Forget Paired Devices in the Mac's Sidekey menu; Forget This Mac on the device removes only its own copy.
What moves between your iPad or iPhone and your Mac
Once paired, the two apps talk to each other over your local network, or over a USB cable for an iPad.
| From | To | What |
|---|---|---|
| Mac | iPad or iPhone | The Mac's name and identifier and a pairing request; once paired, a pairing token (sent once), the name, bundle identifier, icon and focused window title of the app in front, whether Sidekey has Accessibility permission, the key layout for that app including what each key does, and the result of each key you tap. For Zoom, also meeting state such as whether your mic is muted. |
| iPad or iPhone | Mac | Its device name as iPadOS or iOS reports it, an identifier for the device, the pairing code you type, proof that it holds its pairing token, and which key you tapped on which layout and whether the layout is pinned. |
To stay paired, the Mac keeps each paired device's identifier, name and token in its Keychain, and its own identifier in its settings. The iPad or iPhone keeps its token in its Keychain, and its own identifier and the paired Mac's identifier and name in its settings. Neither app saves anything else it receives. The iPad or iPhone app keeps app icons in memory while it is running and forgets them when it closes.
This connection is not encrypted yet. Traffic between the device and the Mac is not encrypted yet. Someone who can watch or tamper with your network could read what Sidekey sends (app names, window titles, the keys you tap and both device names). If they capture the one-time pairing exchange or interfere with a live connection, they could also press keys in your Mac's layouts, including ones you made, for example to open Terminal or lock the Mac, until you choose Forget Paired Devices on the Mac. Use Sidekey over USB (iPad) or on a network you trust. Encryption is planned.
Permissions Sidekey asks for
On the iPad or iPhone
Local Network: to find and connect to Sidekey on your Mac.
On the Mac
Accessibility: to send keyboard shortcuts to the app in front and to read its window title and menu state.
Automation: to run the AppleScript actions on some keys, such as Play/Pause in Music.
Local Network (macOS 15 or later): to listen for your iPad or iPhone.
You can turn any of these off at any time in Settings on the iPad or iPhone, or System Settings on the Mac. Sidekey will tell you when a key cannot run because a permission is missing.
Apple and GitHub
If you install the iPad and iPhone app from the App Store, Apple may share crash reports and usage information with the developer if you have chosen to share them in your device settings.
If you test the iPad and iPhone app with TestFlight, Apple shares with the developer the name and email address you were invited with, and the crash reports and feedback that TestFlight collects while you test. Both are covered by Apple's privacy policy.
If you download the Mac app from GitHub, GitHub's privacy statement covers that download.
Children
Sidekey is a productivity tool and is not directed at children. It collects no data from anyone.
Changes
If this policy changes, the new version will be posted on this page with a new effective date.
Contact
Questions about privacy: m.hoque@gmail.com.