Privacy by architecture
Your workspace stays yours.
No telemetry. No analytics. No advertising. No VisionDesk cloud account. Your screens move between your Mac and Vision Pro—not through our servers.
The short version
- VisionDesk does not collect, sell, or send your data to us or advertising partners.
- Screen frames and Mac audio stream directly to Vision Pro over your local network.
- The Mac Host contacts the public release feed for updates.
- The Vision Pro app uses Apple’s StoreKit only for product information, purchases, restores, and verified entitlement status.
Last updated July 12, 2026
What data flows where
Inside your local network
The Vision Pro app discovers the Mac with Bonjour and connects over TCP and UDP. Captured screen frames and Mac audio are encoded and streamed to the headset. Pointer, keyboard, layout, and focus updates return to the paired Mac. VisionDesk protects these application connections with TLS and DTLS using the secret established during pairing. Your local network’s link security provides an additional layer.
Outside your local network
The Mac Host’s Sparkle updater fetches the signed RSS appcast from the public in16guus/visiondesk-releases GitHub Release about once per day to check for a new version. On Vision Pro, Apple’s StoreKit framework contacts the App Store to load subscription products, complete or restore purchases, and verify the current Pro entitlement. VisionDesk has no purchase server and receives no payment details.
What stays on your devices
- Workspace layout, preset, visual preferences, and environment choice in
NSUserDefaults. - A Custom Photo you explicitly choose, stored in the Vision Pro app’s Application Support directory.
- The pairing secret in the operating-system Keychain on both devices.
- Sparkle’s update-check timestamp in
NSUserDefaultson Mac. - App Store transaction and entitlement records maintained by Apple. VisionDesk reads Apple’s cryptographically verified local result and does not upload it to VisionDesk servers.
You can remove the Custom Photo inside VisionDesk. Deleting the apps removes their local settings and files. A pairing secret is replaced after you successfully connect with a different pairing code; operating-system Keychain items may otherwise persist across reinstall.
Permissions, with a reason for each one
- Screen Recording on Mac — captures the displays you choose to stream.
- Local Network on both devices — discovers the paired device and carries the session.
- World sensing and hand tracking on Vision Pro — places and directly manipulates spatial screens while the immersive workspace is open.
- Photos on Vision Pro, user initiated — Apple’s system picker exposes only the photo you select for Custom Photo. VisionDesk cannot browse the library.
VisionDesk does not request camera, microphone, contacts, or location access.
Apple privacy manifests
The bundled privacy manifests declare no tracking, no collected data types, and only standard reasons for UserDefaults and file-timestamp access. They are visible in the app bundles and source tree at Apps/ImmersedMac/PrivacyInfo.xcprivacy and Apps/ImmersedVision/PrivacyInfo.xcprivacy.
Third-party and system components
- Sparkle provides Mac updates and contacts only the configured public appcast URL.
- Apple media and spatial frameworks provide capture, encoding, playback, networking, and spatial presentation.
- Apple StoreKit displays localized Pro offers and verifies purchases. Apple’s privacy policy governs Apple Account and payment data.
Changes and contact
Material changes are announced in the release notes. The canonical policy is published at this page's permanent address.
For a privacy question, use the public support forms. Report vulnerabilities through the private security advisory form.