Privacy

How they connect

• The App finds your computer on your local network with Bonjour and connects to it over TLS.
• Your computer serves its own self-signed certificate. The App records its fingerprint when you pair and refuses to connect if it ever changes.
• You can also give the App an address yourself, such as one on your own Tailscale network. Either way the connection goes straight to your computer.

On your computer

• For each paired device, its name, when its credential expires and a hash of that credential. The pairing request is kept with it, including the network address it came from.
• The public SSH key of each device, as one marked line in your authorized_keys file. That line is what lets the App open a terminal.
• A streaming certificate for each device in the Sunshine fork, so the App can show your screen.
• Only if you turn on Face ID approval, the public key your device enrolled. The private half never leaves the device.
• Only if you turn on clipboard sync, the clipboard text passes through memory on its way to or from your device. Omodachi keeps no copy of it.
• Only while you hold to talk, your voice goes to a virtual microphone on your computer and Voxtype, the dictation tool Omarchy offers, turns it into text. Omodachi does not record it.
• Everything else Omodachi keeps is in ~/.config/omodachi and ~/.local/state/omodachi. Removing a device takes back its credential, its key line and its certificate, and uninstalling with --purge deletes both folders.

On your device

• The credential for each computer, its certificate fingerprint and the SSH private key are in the iOS Keychain. They are readable only while the device is unlocked and never leave this device.
• The key behind Face ID approval is made in the Secure Enclave and cannot be read out of it.
• Your preferences, pinned rows and a cache of the fonts your computer sends are kept in the App's own storage.
• Deleting the App removes its own storage. iOS can keep Keychain items after an app is gone, so forget each computer in the App first to clear those too.

What the App asks

• Local Network, to find your paired computers and connect to them.
• Face ID or Touch ID, to approve a password prompt on your computer. The App never stores or sees that password.
• Microphone, only while you hold to talk, to send your voice to your computer.
• Bluetooth, which iOS may ask about because Moonlight's bundled SDL library carries game controller support. Omodachi never scans for or connects to Bluetooth devices.
• Nothing else. No camera, no photos, no contacts and no location.

Software inside the App

• Moonlight under GPL-3.0 draws the streamed screen, LibVNCClient under GPL-2.0 or later draws the VNC screen, and SwiftTerm and Citadel under MIT run the terminal.
• None of them talks to anything but your computer, over your own network.

Contact

Questions about privacy go to [email protected].

The source of all of it is at github.com/omodachi.

If this page changes, the date at the top changes with it.