Privacy by architecture

Your workspace stays yours.

No telemetry. No analytics. No advertising. No VisionDesk cloud account. Your screens move between your Mac and Vision Pro—not through our servers.

What data flows where

Inside your local network

The Vision Pro app discovers the Mac with Bonjour and connects over TCP and UDP. Captured screen frames and Mac audio are encoded and streamed to the headset. Pointer, keyboard, layout, and focus updates return to the paired Mac. VisionDesk protects these application connections with TLS and DTLS using the secret established during pairing. Your local network’s link security provides an additional layer.

Outside your local network

The Mac Host’s Sparkle updater fetches the signed RSS appcast from the public in16guus/visiondesk-releases GitHub Release about once per day to check for a new version. On Vision Pro, Apple’s StoreKit framework contacts the App Store to load subscription products, complete or restore purchases, and verify the current Pro entitlement. VisionDesk has no purchase server and receives no payment details.

What stays on your devices

  • Workspace layout, quality, Dock, widget and presentation preferences in local app storage.
  • Saved Workspaces and their deletion records in each app's Application Support directory.
  • The pairing secret in the operating-system Keychain on both devices.
  • Sparkle’s update-check timestamp in NSUserDefaults on Mac.
  • App Store transaction and entitlement records maintained by Apple. VisionDesk reads Apple’s cryptographically verified local result and does not upload it to VisionDesk servers.

Deleting the apps removes their local settings and files. A pairing secret is replaced after you successfully connect with a different pairing code; operating-system Keychain items may otherwise persist across reinstall.

Permissions, with a reason for each one

  • Screen Recording on Mac — captures the displays you choose to stream.
  • Local Network on both devices — discovers the paired device and carries the session.
  • World sensing on Vision Pro — reads head-pose direction so the active spatial screen can receive the intended quality allocation.
  • Microphone and Speech Recognition on Vision Pro, user initiated — active only while you hold Quick Note's Dictate control to turn speech into a note on the device.
  • Calendar on Mac, optional — supplies the next event to the Next Up widget when enabled.
  • Apple Events on Mac, optional — asks Music or Spotify what is playing for the Now Playing widget when enabled.

VisionDesk does not request camera, Photos, contacts, hand tracking or location access. Optional widget permissions can remain denied without blocking the display workspace.

Apple privacy manifests

The bundled privacy manifests declare no tracking, no collected data types, and only standard reasons for UserDefaults and file-timestamp access. They are visible in the app bundles and source tree at Apps/ImmersedMac/PrivacyInfo.xcprivacy and Apps/ImmersedVision/PrivacyInfo.xcprivacy.

Third-party and system components

  • Sparkle provides Mac updates and contacts only the configured public appcast URL.
  • Apple media and spatial frameworks provide capture, encoding, playback, networking, and spatial presentation.
  • Apple StoreKit displays localized Pro offers and verifies purchases. Apple’s privacy policy governs Apple Account and payment data.

Changes and contact

Material changes are announced in the release notes. The canonical policy is published at this page's permanent address.

For a privacy question, use the public support forms. Report vulnerabilities through the private security advisory form.