Privacy
Last updated 23 September 2026
The short version. tomac has no server, no account and no analytics. Nothing is ever sent to us or to anybody else, because there is nowhere for it to go. Your phone and your Mac talk directly to each other over your own Wi-Fi, and everything they share with each other, codes, files, photos and notifications, stays on those two devices.
What we collect
Nothing. We operate no servers, so there is no database, no log file and no account holding anything about you. We cannot see what you copy, which apps send you codes, how often you use tomac, or whether you use it at all.
There is no analytics SDK, no crash reporter, no advertising identifier and no third party code of any kind that phones home.
What stays on your devices
tomac reads a small amount of data on your phone in order to hand it to your Mac. All of it stays on your two devices.
- Verification codes. The Android app reads notifications to find them. A matched code is held in memory for five minutes and then discarded, and a notification that yields a code is never also mirrored. Nothing is written to disk.
- Notification mirroring. The Android app also reads each notification's app name, title and text so it can show up on your Mac too. Mirroring is on by default. Unless you turn it off, with the switch on the phone or the toggle on the Mac, or mute that app, it sends the app name, title and text to your Mac over the same encrypted connection, where it appears in your Mac's Notification Center. Some notifications never leave the phone no matter what: tomac's own, ongoing and background service notifications, group summaries, ones marked secret for your lock screen, low priority ones, and an update that repeats itself without changing the text.
- Between checks. The phone keeps a short list of recent notification events, up to 200, in memory only, so your Mac can collect anything that arrived between its checks every couple of seconds. It is never written to disk and is gone if the app restarts. After a disconnect, your Mac starts fresh from new notifications and does not replay the ones it missed.
- Mirrored notifications on the Mac. Once a notification reaches your Mac, macOS keeps it in Notification Center the same way it keeps any app's notifications, until you clear it. Clearing one on the Mac clears it on your phone too.
- Muted apps. Muting an app stops its notifications on the phone before they are ever considered for mirroring, so a muted app's content never leaves the phone. The list of muted apps is stored on your phone only. Unmute an app from the Mac's menu or from the phone screen.
- Photos and screenshots. The Android app lists your recent images so they can appear on your Mac. An image is only transferred when you choose it.
- Things you send. Files you drop on the Mac panel, or send from the Android share sheet, travel directly between the two devices. On the phone they are saved to your Downloads folder.
- Clipboard. Read only when you ask for it, by pressing the send shortcut on your Mac or tapping the Quick Settings tile on your phone. Neither app watches your clipboard in the background.
What tomac deliberately cannot see
The Android app does not request access to your text messages, your call log, your contacts, your location, your microphone or your camera, and does not request the all files permission. These are not settings you can turn on. The permissions are absent from the app, so the data is unreachable to it.
On the Mac, tomac runs inside Apple's App Sandbox. It can make outgoing network connections on your local network, write to your Downloads folder, and show notifications in Notification Center. That is the whole list.
How the connection is protected
Your phone generates a certificate the first time it runs, and the private key is held in your phone's hardware keystore where no app, including tomac, can extract it. The connection between your devices is encrypted with TLS using that certificate.
When you pair, your Mac records that exact certificate and from then on refuses to talk to anything else. The six digit number you compare during setup is calculated from the certificate, so if something on your network tried to impersonate your phone, the two screens would show different numbers and you would see it.
Your Mac also holds an access token for your phone, stored in the macOS Keychain. It is only ever sent over the encrypted, certificate pinned connection described above.
Children
tomac is a utility for connecting a phone to a computer and is not directed at children. Since we collect no data at all, we hold no information about anyone, including children.
Your rights
Rights such as access, correction, deletion and portability apply to data a company holds about you. We hold none, so there is nothing for us to disclose, correct, export or delete. Removing the apps removes everything tomac has stored, all of which is on your own devices.
Changes
If tomac ever collects anything, this page will say so plainly and the date above will change. We will not quietly broaden it.
Contact
Questions about this policy can go to hello@tomac.app.