この文書は韓国語と英語で提供しています（以下は英語版です）。

本文件提供韩文和英文版本（以下为英文版）。

Deskify Privacy Policy

Effective: October 27, 2026

Deskify (“the app”) is a Remote Desktop (RDP) and SSH app (the Android and Windows apps and the web pages at deskify-app.com). It sends information nowhere unless it has to; everything it sends, and why, is listed below.

1. Stored only on your device

Saved computers (addresses, user names, passwords, SSH keys), port forwarding, macros, shortcuts, clipboard history, connection times and network usage statistics stay on this device and are never sent to a server. (Only with cloud sync on are the items listed in section 4 also kept, encrypted, in the cloud.) When you are signed in with a Google account, though, daily usage counts (connections, successes/failures, connection route, time to connect) and your country code are sent to the cloud with your account to watch service quality, and deleted after 400 days. They never include the addresses or names of the computers you connect to. Passwords and keys are encrypted on the device. Backup files you create are encrypted with a password you choose and saved where you choose.

2. Remote computers

When you connect over RDP, SSH or VNC, screen, keystrokes, clipboard, files and sound go only between you and the computer you connect to, with no server in between. For screen sharing and web remote (your own PC’s screen in the app or a browser) and web Deskify, see section 3-1.

3. Companion devices and connections between your devices

Devices on the same Wi-Fi connect to each other directly and encrypted, without the internet. Passwords never go to a companion.

When you connect your PC and phone away from home, the signals the two devices need to reach each other (the connection request and network address candidates) are kept in the cloud briefly (2 minutes) and then deleted. Screen, file and clipboard contents travel only between the two devices, encrypted directly between them. To find your devices, the device name, the push-notification token and a network identifier used to tell whether both are on the same network (the first part of the Wi-Fi subnet) are stored with your account. When the two devices can’t connect directly (some office or carrier networks), files go through a relay server (Cloudflare); the content passes through still encrypted between the two devices and the relay cannot read it. Only the amount sent through the relay is recorded, for the monthly per-account allowance.

3-1. Screen sharing, web remote and web Deskify (Pro, only when turned on at the PC)

These work only if you turn on “Allow screen sharing (browser · Deskify app)” or “Computer list and remote access from the web” in the PC app under Settings → Mobile devices → Screen sharing (Pro). Both are off at first.

Screen sharing and web remote: the Deskify app on a phone or tablet of the same account, or a browser you allowed (deskify-app.com/remote.html), sees and controls your PC’s actual screen. Screen, sound, keyboard and mouse input, clipboard and files travel over WebRTC, encrypted end to end between the two devices. Our server (a Cloudflare Worker) only passes on the signals that set up the connection, deleted shortly afterwards as in section 3. Only when the two devices can’t connect directly does the connection go through Cloudflare’s relay server (TURN); the content then passes through still encrypted and the relay cannot read it. Only the time and amount relayed are recorded, for the daily per-account allowance. Your PC’s screen and input are never stored anywhere.

Web Deskify (deskify-app.com/app.html): a browser shows your PC’s vault list and connects through that PC to SSH servers, Remote Desktop and VNC. The PC sends the browser only the list (display details such as names, addresses and types), never passwords or keys, and makes the connections itself with what it keeps. For a computer that needs a password, the password typed in the browser goes to the PC for that connection only and is stored neither in the browser nor on the PC. The browser and the PC use the same encrypted WebRTC connection as above, and terminal and remote-screen contents are not stored either.

Allowing a browser: a browser signs in with a Google account (section 4) or comes in by scanning the QR code it shows with the phone app. Either way it must be allowed from a device you already use (phone or PC), like a new device. A browser allowed “just this once”, and one let in by QR, leaves the account when its page closes or after 12 hours. When you allow by QR, the phone shows the browser type and operating system (as the browser reports them) and the approximate location (city and country) so you can decide; the request is deleted within minutes. An allowed browser’s name (such as “Chrome · Windows”), operating system and the time it was allowed are kept in the device list, and the browser keeps a device key of its own. A browser cannot see your vault or sync data.

Notices: each connection is shown on the PC’s screen and announced to the account’s phones by push notification (the browser’s or device’s name and the PC’s name). When a device or browser is allowed or denied, or a request ends unanswered, you are told by e-mail at the account’s address.

Lock-screen service (Windows, optional): turning on “Also on the lock screen (installs a service)” in the PC settings installs a small Windows service after one administrator approval (UAC). It is used only to send the lock, sign-in and UAC screens and to type there during screen sharing; it takes no network connections and neither stores the screen nor sends it anywhere else. Turning it off or uninstalling Deskify removes it.

4. Google account (free trial and cloud sync)

Starting the 7-day free trial signs you in with a Google account. The account’s identifier and the trial start time are kept in the cloud, so the trial can’t be started again with the same account. For signing in, the Google account’s email address and identifier are kept by Google Firebase Authentication. Account notices (welcome, a new device or browser signing in and whether it was allowed, denied or expired, purchase confirmation) are sent to that address; no advertising mail is sent. The trial record that stops the same account from starting the trial again stays for a year after the account is deleted, as a hash of the Google account identifier. To delete your account and data, see Delete your account.

With cloud sync on, saved computers (addresses, user names, passwords, SSH keys), port forwarding, shortcuts, macros, tags, Stream Deck buttons (without their images), OTP entries (names and secret keys) and the AI helper key are kept in the cloud, matched only between devices signed in to that account. This content is stored encrypted with a key created for your account, and that key is also kept in your account’s cloud storage. It therefore relies on the cloud provider’s (Cloudflare’s) server security and on our access controls, and the developer could technically decrypt it. The developer does not open it unless you ask (for troubleshooting). Device names, models, operating systems and a device check key (hashed) are kept too, to show the list of syncing devices and to have a new device allowed from one you already use, along with the country (country code) you connected from. The Google account's name and profile picture address are used for account management and in the greeting of notice e-mails. Clipboard text and files sent between your devices do not go through the cloud. Turning sync off leaves the cloud copy in place; see section 11 to delete it.

5. Payments

Subscriptions and the lifetime purchase in the app are handled by Google Play billing. The app never sees card details; it only checks what was bought. To verify that a purchase is genuine, the purchase token issued by Google Play is stored with your account and our server checks it with Google Play.

On the web (deskify-app.com/buy.html), payment is handled by Paddle.com Market Ltd (UK) as the merchant of record: Paddle processes card details, billing address, taxes, receipts and refunds under its own privacy policy. We never receive card details. Paddle tells our server only the purchase status (product, period, status, end date, and Paddle’s subscription, transaction and customer numbers) together with the paying Google account’s identifier (passed along at checkout), which turns Pro on in the app. A purchase confirmation is sent to the account’s e-mail address.

6. Ads (free use)

Ads are shown while you use the app for free. Device information such as the advertising ID may be used for them, and consent is asked first where required. The advertising ID is shared with Google’s ad service (AdMob). Pro has no ads and does not use the advertising ID.

7. Error reports

If the app closes unexpectedly, where it failed, the device model, the Android and app versions and an installation identifier (Firebase installation ID) are sent to the cloud and used only to fix the bug. Addresses, passwords and screen contents are never sent, and reports are deleted after 90 days. This reporting is on only in the release build installed from Google Play.

A diagnostic report you choose to send contains device information and a record of what the app did, without passwords. Device names or local network addresses may appear in it to find the problem; it is encrypted so only the developer can open it.

8. Genuine-app check and the free trial

To protect cloud sync and the free trial, the app confirms it is the unmodified app installed from Google Play (Google Play Integrity). Only the state of the device and the app is used for this, no personal information.

The free trial is once per device. So that it can't be had again by switching accounts, starting it stores a one-way hash of the device identifier (Android ID) with the account's trial record, and leaves a "trial used on this device" mark in Google Play's device recall, where Google also records its month. Google keeps that mark; through it we receive nothing that identifies the device or the user. The device record is deleted a year after the trial started; the hash in the account's trial record is kept while the account exists (up to a year after it is deleted). Marks older than two months are ignored. This information is used only to prevent repeated trials.

8-1. AI helper (Labs, only when turned on)

It works only if you turn it on in Settings → Labs and add your own Claude, OpenAI or Gemini API key. Each time you ask, what you wrote and the last lines of the SSH terminal, or a picture of the remote PC's screen when you send one with “Ask about the screen”, go straight from this phone to the company that issued the key (Anthropic, OpenAI or Google), never to us. The key is stored encrypted on the device and, with cloud sync on, synced encrypted as described in section 4. See the Anthropic, OpenAI or Google privacy policy.

9. Service providers

Sign-in, purchase and trial records, error reports, the genuine-app check, payments, ads and sending account notice e-mails (Gmail) use services from Google LLC; the cloud sync data, the device list, the connection signals between your devices and the relay (TURN) for files, screen sharing and web remote use services from Cloudflare, Inc. (USA); web payments use Paddle.com Market Ltd (UK). This information is sent over the internet when you use sync or connections and may be stored and processed on their servers outside your country (such as in the USA), only for the purposes above.

10. Permissions

Internet and network state (connecting), nearby devices / local network (computers and companions on the same network), notifications (keeping connections, finished tasks, PC-on alerts), microphone (sending sound to the remote computer, when you turn it on), exact alarms (waking a PC at a scheduled time), boot completed (restoring schedules), keyboard capture (sending shortcuts such as Win and Alt+Tab to the remote computer), foreground service (keeping connections in the background), advertising ID (ads during free use).

11. Deletion

Uninstalling the app removes everything stored on the device. My account → Delete account in the app deletes all your cloud data and the account right away. See Delete your account for details. You can also ask by email (address below). After the account is deleted, payment records (account identifier, product, time, amount) are kept for five years as Korean e-commerce law requires, and the trial record stays for a year so the same account can't reuse it. For statistics on account deletions, the time of deletion, the country and the plan at that time are kept for one year with the account identifier (no e-mail address or name). If your sync allowance has ended and no device has used the account for 12 months, the cloud sync data is deleted automatically (the account and the trial record stay).

12. Contact

support.deskify@gmail.com