Heron is made by Rolling Rabbits Sh.p.k. This policy covers the Heron apps for iPhone, iPad and Mac, and the optional notification service.
Between your devices
Your phone connects directly to the Heron app on your Mac, over your local network or your own Tailscale network. Every connection is encrypted, and only devices you paired by scanning the Mac’s code can connect. Window pictures, pointer movements, keystrokes and shared clipboard text travel only on that connection. We can’t see them.
Stored on your devices
- Your paired Macs, your settings, and the names and apps of the windows you last saw on each Mac, so the app can show them before it connects.
- If you set up Remote Unlock, your Mac’s Screen Sharing password, kept in the Keychain on your phone and opened with Face ID.
- The Mac app keeps a log on your Mac, in
~/Library/Logs/Heron, to help diagnose problems. It never leaves your Mac unless you send it to us.
Camera, microphone and clipboard
- Camera: only to scan the pairing code shown on your Mac. Nothing is recorded.
- Microphone: only while you dictate from the keyboard strip. Apple’s speech recognition turns your speech into text on your device. The audio isn’t stored or sent anywhere, and the text goes to your Mac only when you tap Send.
- Shared clipboard: off until you turn it on. When it’s on, copied text moves directly between your phone and your Mac. Text that a password manager marks as private stays on the Mac.
Agent notifications (optional)
If you turn on agent notifications, your Mac sends its alerts through our notification relay, because Apple only delivers notifications through a server. To do that, the relay stores:
- your device’s Apple push token,
- whether it’s a test or App Store build,
- the date your Heron Pro subscription runs until, which it checks against a signed record of your purchase from Apple.
Your Mac encrypts each notification with a key that only your phone and your Mac have, so the relay passes along text it can’t read. It sees IP addresses only to limit abuse and doesn’t keep them. Our hosting provider, Fly.io, runs the relay in Frankfurt and may keep short-term technical logs. Turning off agent notifications removes your device from the relay.
Purchases
Apple handles payments for Heron Pro. We never see your name, Apple Account or payment details, only the signed record Apple provides that a subscription is active.
Updates for the Mac app
The Mac app checks our website for updates once a day. Like any web request, this reveals your IP address and the app’s version to our web host. Nothing else is sent.
Children
Heron isn’t directed at children and collects no personal information from anyone.
Changes
If this policy changes, we’ll update this page and the date above.
Contact
Questions about privacy: hello@goheron.app.