Who we are
CTRL Micro is operated by MedHue Labs LLC. Contact us at [email protected].
Local app data
CTRL Micro normally connects your iPhone and selected Mac directly over your local network. Pairing credentials, purchase keys, signed leases, the selected Active Host, layouts, and preferences are stored on your devices; sensitive Mac credentials are stored in Apple Keychain. We do not receive the text of prompts, dictation transcripts, desktop-client messages, or control actions as part of local operation.
Optional Remote Anywhere
If you enable Remote Anywhere, your Mac and already-paired controllers connect to our Cloudflare relay using outbound encrypted WebSockets. End-to-end encrypted frames may contain control traffic, previews, or dictation data, but the relay routes them as opaque bytes and cannot read their contents. The relay stores hashed Host and controller routing credentials, opaque Host and device identifiers, creation times, connection state, and limited rate-limit and operational metadata. Remote pairing is not supported.
Optional background notifications
If you enable background notifications, each enabled paired Mac may send an encrypted task route through our Cloudflare notification relay and Apple Push Notification service. The relay stores a hashed authorization value, an encrypted APNs device token, enabled delivery categories, sound preference, and limited anti-abuse timestamps. It does not store notification history, prompts, conversations, projects, transcripts, or readable task details. Inactive notification registrations are deleted after 90 days, and unpairing revokes the corresponding registration.
License and purchase data
When you purchase or activate CTRL Micro, we process the purchased access level, your email address, Stripe transaction identifiers, license status, a random device identifier, the Mac name provided by the app, activation dates, and a pseudonymous rate-limit value derived from the requesting IP address. We use this only to deliver, activate, support, refund, suspend, or restore purchases and prevent abuse.
Service providers
Stripe processes checkout and payment data. Cloudflare hosts activation, Remote Anywhere, and optional notification services. Apple delivers enabled push notifications. Resend delivers transactional purchase email. Vercel hosts this website and may process standard request logs. Their handling is governed by their own privacy terms.
Retention and choices
We keep purchase and license records while a license remains valid and as needed for tax, fraud, dispute, and legal obligations. Short-lived security and service logs are retained only as needed to operate and protect the service. You may request access, correction, or deletion by emailing us; some transaction records must be retained where the law requires it.
Security and children
We limit credentials to device Keychain or managed service secrets, use signed device-bound license leases, and restrict license access. No system is perfectly secure. CTRL Micro is not directed to children under 13.
Changes
We will post material updates here and revise the effective date.