Privacy Policy

Scope

This policy applies to Cairn for iOS and Cairn for macOS, provided by P 10 Q LLC ("p10q"). Cairn for iOS is a companion that connects to a Mac you control.

Data p10q does not collect

Cairn has no p10q account system, advertising, analytics, tracking SDK, or third-party crash-reporting service. p10q does not receive or retain:

• terminal input, output, commands, files, or session contents;
• SSH private keys or AWS access credentials;
• paired Mac names, addresses, or workspace information;
• camera images or scanned QR codes; or
• usage analytics, advertising identifiers, or location data.

Information stored on your devices

The iOS app stores paired Mac connection details, a per-device SSH private key, and credentials for your own AWS EC2 Instance Connect Endpoint in the iOS Keychain. These Keychain items are restricted to the device and do not synchronize through iCloud Keychain.

Display preferences and optional connection diagnostics are also stored locally. Connection diagnostics may contain host names, AWS resource identifiers, connection states, and error messages. They remain on the device unless you choose to share them with support.

Connections and AWS

When you connect remotely, the iOS app sends traffic through infrastructure in your own AWS account and then to your Mac. AWS EC2 Instance Connect Endpoint provides the network path. SSH encrypts the terminal session and verifies the jump host using a pinned host key.

p10q does not operate this connection service and cannot access the traffic. AWS processes network requests and operational metadata under your AWS agreement and the AWS Privacy Notice. Your internet provider and Apple may also process ordinary connection metadata as part of providing their services.

Device permissions

• Camera: used only to scan a pairing QR code. Images are processed on the device and are not saved or sent to p10q.
• Local network: used when you connect directly to a Mac on the same network.

Retention and deletion

Because p10q does not collect app data, p10q has no app account or server-side profile to delete. Use Settings > Forget all Macs in the iOS app to remove saved connection details and credentials from the Keychain. Deleting the app removes its local container, but iOS may preserve Keychain items unless you clear them in the app first.

To revoke remote access immediately, use Remote > Paired iPhones on the Mac. To remove the related AWS credential completely, delete the matching cairn-iphone-* IAM user in your AWS account. Deprovisioning Cairn's jump host removes the AWS resources created for remote access.

Children

Cairn is a developer tool and is not directed to children under 13. p10q does not knowingly collect personal information from children.

Changes

We may update this policy when Cairn's data practices change. The effective date above identifies the current version. Material changes will be reflected here before the related app update is released.

Contact

Questions about Cairn privacy can be sent to tom@p10q.com.