Skip to content
r://app

r://phoneset/privacy

Privacy policy · Effective 29 October 2026

This policy covers the phoneset phone app for iOS and Android. It is not on the App Store or Google Play yet, and applies to the releases published there from the day they are. The PC program it works with is covered near the end.

The short version: the app has no account and no analytics, advertising, tracking or crash reporting, and there is no server run by the developer. The app sends nothing to the developer. Its only network traffic is with the user's own PC on the local network, and what it keeps is a list of those PCs, on the phone.

What the app does on the network

phoneset connects a phone to a PC over the local network, and that is the only thing the app sends anything to. It does three things.

  • Finding the PC. The app looks for PCs that announce themselves on the local network over mDNS (Bonjour), as the service _phoneset._tcp.
  • Checking an address. For each address it knows for a PC, from a QR code, a discovery result, a typed address or an earlier pairing, the app makes one HTTP request to /v2/info on that address, to ask whether a phoneset PC answers there. The answer is the PC's name, its identifier and the protocol version.
  • Connecting. The app opens a WebSocket to the PC at /v2/ws. After an opening handshake of two plaintext messages (a protocol version and public keys), every message is encrypted and authenticated with AES-256-GCM, using keys derived from a P-256 key exchange. That cryptography is the phone's own operating system: CryptoKit on iOS and the Java cryptography architecture on Android.

Audio, the pairing secret and the proofs that follow all travel inside that encrypted channel. Someone else on the same Wi-Fi sees that two devices are talking, and when sound is being sent, but not what is said. The protocol is written down in the source repository as docs/protocol.md.

All of this is between the phone and a PC the user chose to pair with. None of it goes to the developer or to any server of the developer's.

Support, Privacy policy, Source code and MIT license in Settings, and the install page button in How it works, hand a link to the phone's web browser. The app itself sends nothing; the browser then loads the page like any website, from rauf.app (served through Cloudflare) or from GitHub, and those services handle the request under their own privacy policies.

Permissions

Each permission is used for the one purpose below and no other.

  • Microphone. Audio is captured only while the Microphone switch on the Connected PC screen is on. It is sent only to the PC the phone is connected to, encrypted as described above. The app does not record it or store it.
  • Headphones. The app plays audio it receives from the PC through the phone. It does not store it.
  • Camera. Used only on the Scan QR code screen, to read the pairing QR code shown by the PC. The camera image is not saved or sent anywhere.
  • Local Network (iOS) and Wi-Fi multicast (Android). To find the PC on the local network and talk to it.
  • Notifications (Android). To show the notification Android requires while the microphone keeps running in the background.
  • Background audio (iOS). To keep the connection running while the screen is off and the microphone or headphones are on.

What stays on the phone

The app stores two things, and both stay on the phone.

  • The paired PCs. For each one: its name, its identifier, its network addresses and port, the date it was paired, and a secret token the PC handed out at pairing. The token is what proves this phone to the PC on every later connection.
  • A device identifier. A random number the app creates the first time it needs it. It is sent to the PC when pairing, together with the phone's name and whether it is an iPhone or an Android phone, and again each time the phone reconnects, so that the PC can tell its paired phones apart.

Both are kept in the system's secure storage: the Keychain on iOS, and on Android a store encrypted with a key held in the Android Keystore. On iOS the entries are the kind that are readable only while the phone is unlocked and are not moved to a new phone when restoring from a backup. On Android the app opts out of Android backup, so they are not copied into one.

Removing it

Forget, next to a PC on the Home screen, removes that PC from the list on the phone. Removing the app removes everything it stored on Android. On iOS, the Keychain can keep an app's entries after it is deleted and hand them back if it is installed again, so use Forget on each PC before deleting the app if the list should be gone for good.

The PC keeps its own record of each paired phone. Removing the phone from the PC, with phoneset forget or from the tray icon's Paired phones menu, ends the pairing from that side.

The PC program

The PC half of phoneset is a separate, open source program that the user installs and runs on their own Windows PC or Mac. It has no cloud either. It listens on the local network, announces itself over mDNS, and keeps its paired phones in a folder on that PC. It contacts GitHub only when the user asks it to check for or install an update, with phoneset update or the tray icon's update entry; nothing checks by itself.

What phoneset does not do

It has no sign-in and no account. It contains no analytics, advertising or tracking code and no crash reporting, does not follow anyone across other apps or websites, and does not sell, rent or share personal data, because it never has any to share. If any of that changes, this page changes first.

Email

Writing to [email protected] means the developer receives the message, the sender's address and anything attached. Messages are used only to answer them and to fix what they report, and are deleted on request.

Who is responsible

The data controller is the individual developer who publishes phoneset, shown as the seller on its App Store page, and on Google Play once the app is released there. Contact: [email protected].

The app sends nothing to the developer, so the developer holds no data about anyone's use of it. The only personal data the developer ever receives is what people send by email.

Your rights

Anyone can ask [email protected] what the developer holds about them, ask for it to be corrected, or ask for it to be deleted, and can object to how it is used. Requests are answered free of charge, within 30 days. Where a law such as Turkey's data protection law (KVKK) or the EU's GDPR gives further rights or the right to complain to a supervisory authority, those apply as well.

What the app keeps on the phone is not held by the developer. It is removed on the phone, as described under Removing it.

Children

phoneset is a utility for connecting a phone to a PC and is not directed at children. The app sends nothing to the developer, so it collects no information from anyone, children included.

Changes

When the app starts sending something to anyone other than the user's own PC, this page changes before the app does, and the effective date at the top moves with it.