Vitral

Privacy Policy

Updated October 19, 2026.

Vitral streams your own Mac to your iPhone or iPad. Local connections stay between your devices. If you enable the Lumozz relay, encrypted traffic passes through our server, which processes connection metadata.

This policy covers Vitral for Mac, iPhone and iPad, including its optional Lumozz relay.

Connections and the optional relay

You can connect over a local network, USB cable, Direct Wireless Connection, or your own remote network route such as a VPN. Remote Access and Reach from anywhere (Lumozz relay) are off by default on the Mac. Enable the relay only if you want that route. Pair your devices locally first; the relay does not pair new devices.

With the relay enabled, your Mac registers with relay.lumozz.com. For hosted Remote, a subscribed device validates its purchase before receiving a short-lived private routing address. It can use that address to check whether its Mac is registered before a streaming session starts. Registration means the Mac is connected to the relay, not that its screen is usable or that it can complete a session.

The relay forwards the encrypted stream. Your phone's TLS 1.3 connection ends on your Mac, with the paired keys checked at both ends. The relay does not decrypt the screen, typed text, clipboard, photos or Mac-unlock password. It does process source IP addresses, the Mac routing identifier, registration and connection times, session identifiers, traffic sizes, durations and failure reasons. The routing identifier is not an anonymous guarantee.

Remote subscriptions

Apple handles subscription purchases and payment details. To activate hosted Remote, your device sends Apple-signed purchase information and the selected Mac’s routing identifier to our access service over HTTPS. We validate the signature and current subscription status with Apple. Purchase information can include product and transaction identifiers, purchase and expiry dates, storefront and currency information. We do not receive your Apple Account password or payment-card details.

The access service holds short-lived routing permissions in memory, including a hashed subscription identifier, the Mac identifier, a private routing address and expiry time. Permissions expire after no more than five minutes unless renewed after another successful check. This state enforces paid access and simultaneous-device limits. Signed purchase records are processed for validation and are not deliberately written to our application logs or stored by this service. Your streamed content remains encrypted between your paired devices.

Relay logs and retention

The relay writes operational logs containing IP addresses, timestamps, connection events, the first six characters of a Mac identifier and the first eight characters of a session identifier, plus byte counts, durations and failure reasons. The relay does not deliberately log full session identifiers, authentication challenges, keys or signatures. The presence endpoint does not write a relay log line for each request.

Relay container and reverse-proxy container logs rotate at three files of up to 10 MB each, confirmed in the deployed configuration on October 19, 2026. This is a size limit, not a promise to delete records after a particular number of days. Runtime registration and pending-session state are held in memory. This size bound does not describe separate hosting backups, proxy access logs or messages you send for support.

What travels between your devices

Pairing and Mac unlock

Require pairing is on by default. Pair using the code shown on your unlocked Mac, or a USB cable while the Mac is unlocked. Remove a lost or unwanted device in Vitral's Settings › Devices on your Mac. If you turn off Require pairing, other devices on your local network or nearby direct-wireless route can see and control your Mac. Keep it on.

If you choose to save your Mac login password for biometric unlock, Vitral stores it in the iPhone or iPad keychain, protected by the current biometric enrollment and a device passcode. That saved password is not synchronized or backed up. Unlock sends it through the connection pinned to the saved Mac so the Mac can type it at its lock screen. The host does not persist or log the password. Touch and hold the unlock control and choose Forget to remove the saved password. Biometrics authorize this action; they do not replace your Mac password.

What stays on your devices

The apps keep preferences, pairing keys and saved Mac information, including names and connection addresses. Your Mac keeps paired-device information in its keychain. Your iPhone or iPad keeps its pairing key in its device keychain. Forgetting a Mac removes its saved connection information; remove the device on the Mac as well to revoke its access.

Vitral for Mac keeps a local log in Library/Logs/Vitral in your home folder, rotating at two files of up to 10 MB each. It can contain window and app names, selected menu items, device names and network addresses. Clipboard contents and unlock passwords are not logged. Raw logs can expose personal information: review them before sharing.

Text received from the Mac is written to the device clipboard with a ten-minute expiration and is not passed to Universal Clipboard. Photos saved on the Mac and text pasted into other apps have their own lifetime.

Permissions

On your Mac, Screen Recording lets Vitral stream a picture, and Accessibility lets your device control the Mac and use its menus. Vitral does not save a screen recording. Local Network lets the apps discover and connect to each other. On iPhone and iPad, Camera is used to scan the pairing code; Vitral does not save or send that camera view. Send Photo uses the system photo picker for the images you choose. Biometric authentication protects the optional saved Mac password.

You can revoke permissions in your device's Privacy & Security settings. Revoking a permission may stop discovery, streaming, input or camera pairing.

Analytics, updates and support

The apps have no account sign-in, advertising or analytics SDK. The Mac's automatic update check is disabled. Apple may provide TestFlight feedback or crash reports according to your Apple settings and how you distribute the app. Information you deliberately send for support is separate from the encrypted stream. Do not send passwords, pairing codes or personal screen contents.

Support email sent to hello@lumozz.com is handled using iCloud Mail. Your sender address, message and any attachments you choose to include may remain in the support mailbox until deleted. No fixed automatic deletion period for Vitral support correspondence is promised here. Apple's normal Trash period applies after a message is deleted, rather than setting how long messages stay in the mailbox. See Apple's email deletion guidance. For a request to remove support correspondence, contact hello@lumozz.com with the subject of your original request; do not resend sensitive attachments.

Removing local data

Contact

Vitral is published by Lumozz and includes Sill by Noah Saffer under Apache-2.0. For privacy questions, email hello@lumozz.com with “Vitral privacy” in the subject. This is the existing Lumozz contact inbox.