Privacy Policy

1.Who we are and how to reach us

A&A Global International LLC ("we," "us" or "our"), a company organized in the State of Florida, United States, is the controller responsible for the personal data described in this policy.

For any privacy question, or to exercise a right described below, write to support@aeaglobalinternational.com. For the purposes of Brazil's Lei Geral de Proteção de Dados (LGPD), this is also the contact address for our data protection officer ("encarregado").

2.What this policy covers

This policy covers the iOS App, the Mac App and the website at padlinker.com, together the "Services."

It doesn't cover Apple's own practices when it processes App Store purchases or optional App Analytics (see "Purchases and what Apple processes" below), or any other website or service that isn't ours, even if we link to it.

3.What the apps collect

The iOS App collects, transmits and stores nothing about you. The Mac App contacts the internet in just two narrow, anonymous ways: its periodic check for updates (see "Update checks on the Mac App" below) and crash reports sent only when something goes wrong (see "Crash reports from the Mac App" below).

Apart from those two, neither app talks to any server of ours or of anyone else. Specifically, neither app has any:

• user account or sign-in of any kind;
• analytics SDK of any kind, or tracking of your sessions or how you use the app;
• advertising or ad-tracking SDK;
• location tracking; or
• cross-app or cross-site tracking of any kind.

Everything else PadLinker does happens directly on and between your own devices. Because the iOS App collects nothing, the App Privacy label Apple displays for it on the App Store reads "Data Not Collected."

4.Your local connection

PadLinker uses Bonjour (the "_padlinker._tcp" service type) so your iPhone or iPad can find your Mac on the same Wi‑Fi network. This is why iOS asks you to grant the Local Network permission the first time you open the app; without it, PadLinker can't discover or connect to your Mac over Wi‑Fi.

Once connected, pointer movement, clicks, scrolling and key presses stream from your iPhone or iPad to your Mac over that Wi‑Fi network, directly between your two devices — this traffic never leaves your local network or reaches any server.

That connection is not encrypted in transit. It stays on your own Wi‑Fi, but anyone else able to capture traffic on the same network — for example, an untrusted or poorly secured shared or public network — could potentially observe what you type or where you click. For that reason, only use PadLinker over Wi‑Fi on a network you trust, such as your home or office network.

PadLinker also uses Bluetooth to find and connect to your Mac when your devices aren't on the same Wi‑Fi network — for example, on a train, in a café or hotel, or with an Ethernet-only Mac. This is why iOS and macOS ask you to grant the Bluetooth permission. Over Bluetooth, the link between your devices is encrypted by the system's own Bluetooth pairing, and you may be asked to confirm a pairing request once, on both devices.

5.Permissions on your Mac

The Mac App is sandboxed and needs the standard macOS Accessibility permission to post the pointer, scroll and keyboard events it receives from your iPhone or iPad as real input on your Mac — this is how every app that controls the pointer works, PadLinker included. Accessibility does not let PadLinker read your screen, your files, or what's happening in other apps.

You can review or revoke this permission at any time in System Settings › Privacy & Security › Accessibility. Revoking it stops PadLinker from injecting input until you grant it again.

6.Update checks on the Mac App

The Mac App is distributed outside the Mac App Store, so it checks for new versions itself. About once a day, it requests a small file at padlinker.com — the same website you're reading this on — to see whether a newer version exists.

That request carries only what any ordinary request to a website carries, handled the same way as a visit to this site (see "The website" below); it includes no account identifier, no usage data, and no profile of your Mac or how you use PadLinker.

If a newer version is available, the Mac App tells you and lets you choose whether to install it — nothing downloads or installs without your action. You can trigger this check yourself at any time from the menu bar, or turn it off there with the "Check for updates automatically" toggle.

7.Crash reports from the Mac App

The Mac App can send an anonymous crash report so we can find and fix bugs. It does so only when something goes wrong: a crash, the app hanging or freezing, or an internal error — for example, when the Mac can't make itself reachable, when a connection from your iPhone or iPad is malformed or incompatible, or when an update fails to download or install. It sends no usage analytics, no sessions and no performance traces. The iOS App sends no crash reports at all.

A report contains a stack trace, the app version and macOS version, your Mac's model, and a trail of recent in-app events, such as "connected over Wi‑Fi" or "update check finished." It never contains device names, keystrokes or typed text, pointer movement or gestures, or Wi‑Fi network names. IP addresses are not stored: Sentry strips them when a report arrives. And a report carries no identifier of any kind — no account, no user ID and no device ID.

Reports are sent to Sentry, run by Functional Software, Inc., which acts as our processor and stores them in its United States region, under its Data Processing Addendum (https://sentry.io/legal/dpa/); see Sentry's privacy notice at https://sentry.io/privacy/. Sentry keeps each report for up to 90 days, then deletes it.

Crash reports are on by default. You can turn them off at any time with the "Send crash reports" toggle in the Mac App's menu bar, right under "Check for updates automatically"; turning it off takes effect immediately. We rely on our legitimate interest in keeping the app working, under GDPR article 6(1)(f) and, for Brazilian users, LGPD article 7, IX.

8.Purchases and what Apple processes

PadLinker Pro is sold entirely through Apple's in-app purchase system. We never see or process your payment details — Apple handles billing, receipts and refunds as an independent controller, under its own privacy policy (https://www.apple.com/legal/privacy/).

Apple independently keeps records of your App Store purchases for its own purposes (such as order history and support). Your device checks your PadLinker Pro entitlement locally through Apple's StoreKit framework; we don't receive a copy of that record.

If you've opted in on your device to "Share With App Developers," Apple separately provides us with aggregated, anonymized App Analytics and crash data that cannot be tied back to you individually. We receive nothing if you haven't opted in.

9.The website

The website at padlinker.com uses two privacy-focused tools from our hosting provider, Vercel: Vercel Web Analytics and Speed Insights. Both are cookieless — they identify a visit using a one-way hash derived from the incoming request, not a cookie; that hash is not stored long-term, and Web Analytics discards session data after 24 hours.

• Timestamp of the page view
• Page URL and path
• Referrer
• Filtered query parameters (parameters that could identify you are stripped before being recorded)
• Country, region and city, derived from IP address (the IP address itself is not stored)
• Operating system and version
• Browser and version
• Device type, and for Speed Insights, connection speed and Core Web Vitals scores (loading and responsiveness metrics) for the page

We set no cookies of our own. Vercel also keeps short-lived server and edge logs — including IP addresses — for security and operational purposes, kept only as long as needed for that purpose.

10.Why we process this data and our legal bases

We (or our processors, Vercel and Sentry) rely on the following legal bases to process the limited data described above:

• Website analytics, performance and security: our legitimate interests in understanding and maintaining the website, under GDPR article 6(1)(f) and, for Brazilian users, LGPD article 7, IX;
• Mac App crash reports: our legitimate interest in keeping the app working and fixing bugs, under GDPR article 6(1)(f) and, for Brazilian users, LGPD article 7, IX;
• Support requests you send us: to respond to you, under our legitimate interest or, where you're asking about a purchase, in connection with performing our obligations, and under LGPD article 7, V or IX;
• Purchases: performed entirely by Apple, under Apple's own legal bases and terms — we are not a party to that processing;
• We do not use any automated decision-making or profiling that produces legal or similarly significant effects on you.

You can block the analytics scripts with a browser content blocker or extension at any time without losing any functionality of the website.

You can turn off the Mac App's crash reports at any time with its "Send crash reports" toggle, without losing any functionality of the app.

11.Cookies and similar technologies

We set no cookies of our own, and neither Vercel Web Analytics nor Speed Insights uses a cookie — the one-way hash they compute from your request is not stored on your device, is not read back on a later visit, and is not a cookie.

Because nothing is stored on your device by us or on our behalf, this website doesn't show a cookie consent banner — there is nothing to consent to.

12.Who we share data with

We share the limited data described in this policy only as follows:

• Vercel Inc., our hosting provider, which also runs the website's analytics and keeps operational logs, acting as our processor under its Data Processing Addendum (https://vercel.com/legal/dpa) and Standard Contractual Clauses for international transfers; see Vercel's privacy notice at https://vercel.com/legal/privacy-policy;
• Functional Software, Inc. (Sentry), which receives the Mac App's anonymous crash reports and stores them in the United States, acting as our processor under its Data Processing Addendum (https://sentry.io/legal/dpa/); see Sentry's privacy notice at https://sentry.io/privacy/;
• Apple, which independently acts as its own controller for App Store purchases, payment processing, receipts, refunds and Family Sharing, under Apple's own privacy policy;
• Government authorities or other third parties, where we are legally required to disclose information — though as explained above, we hold essentially nothing that identifies you;
• No one else. We don't sell data, run advertising, or share information with data brokers.

We do not sell or share personal information for cross-context behavioral advertising, as those terms are used in the CCPA/CPRA. The iOS App collects nothing, and the Mac App's anonymous crash reports carry no identifier and are never used for advertising.

13.International transfers

The website is served from Vercel's global network, which includes infrastructure in the United States and other countries. Viewing the website may therefore involve a transfer of the limited data described above outside your own country.

Crash reports from the Mac App are stored by Sentry in its United States region, so sending one also involves a transfer outside your own country. Where a report originates in the European Economic Area, the United Kingdom, or another jurisdiction that restricts international transfers, it is covered by Sentry's Data Processing Addendum (https://sentry.io/legal/dpa/) as its transfer safeguard.

Where that data originates in the European Economic Area, the United Kingdom, or another jurisdiction that restricts international transfers, it is covered by Vercel's Data Processing Addendum, which incorporates the Standard Contractual Clauses as its transfer safeguard.

For users in Brazil, any such transfer relies on the mechanisms recognized by LGPD article 33, such as standard contractual clauses. The iOS App transfers nothing to us or anywhere else, so this section concerns only the website and the Mac App's crash reports.

14.How long we keep data

We keep data only for as long as it serves the purpose it was collected for:

• iOS App: nothing is collected, so nothing is retained.
• Mac App crash reports: kept by Sentry for up to 90 days, then deleted.
• Website analytics: the request hash used to identify a visit is discarded after 24 hours; aggregated, non-personal statistics derived from it are retained by Vercel for reporting purposes.
• Server and edge logs: kept by Vercel for a short, operational period for security and troubleshooting, then deleted.
• Support email correspondence: kept for as long as needed to help you, and in any case no more than 24 months.

15.Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Under the GDPR and UK GDPR: the right to access, rectify, erase or restrict your data, to receive a copy in a portable format, to object to processing, to withdraw any consent you've given, and to lodge a complaint with your local supervisory authority or, in the United Kingdom, the Information Commissioner's Office (ICO);
• Under Brazil's LGPD (article 18): confirmation that we process your data, access to it, correction of incomplete or inaccurate data, anonymization, blocking or deletion of unnecessary data, portability, information about the public and private entities we've shared data with, information about your right to refuse consent and the consequences of refusing, revocation of consent, and the right to petition the Autoridade Nacional de Proteção de Dados (ANPD);
• Under the CCPA/CPRA: the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing — which we don't do — without discrimination for exercising any of these rights.

To exercise any of these rights, write to support@aeaglobalinternational.com.

Because we hold no data that identifies you — the iOS App collects nothing, the Mac App's crash reports carry no identifier, and the website's analytics data isn't tied to your identity — most requests will be answered by confirming exactly that, rather than by providing a record, since none exists.

16.Children

PadLinker is not directed at children under 13, and we do not knowingly collect personal information from anyone, which makes that easy: the iOS App collects nothing, and the Mac App's crash reports are anonymous and carry no identifier, so we don't collect information from children or adults.

If a parent or guardian believes their child has somehow provided us with personal information, contact us at support@aeaglobalinternational.com and we'll look into it, though as explained throughout this policy, we have no store of user data that identifies anyone to search.

17.Security

We keep the limited surface described in this policy secure in a few concrete ways:

• The website is served exclusively over HTTPS.
• Having no accounts and no servers of our own removes an entire category of risk — there's no user database to be breached.
• Over Wi‑Fi, the local connection between your iPhone or iPad and your Mac is not encrypted, so use it only on networks you trust, as explained above. Over Bluetooth, that connection is encrypted by your devices' own pairing.
• Keep iOS, iPadOS and macOS up to date, since PadLinker relies on their built-in security and permission models.
• You can review and revoke the Local Network, Bluetooth and Accessibility permissions at any time in your device's settings.

18.Changes to this policy

If we change this policy, we'll post the updated version here with a new "Last updated" date.

If a change is material, we'll highlight it in the Apps' release notes or on the Website. Continuing to use the Services after a change takes effect means you accept the update.

19.Contact

Questions about this policy, or want to exercise one of your rights? Write to support@aeaglobalinternational.com — this is also the contact address for our data protection officer ("encarregado") under Brazil's LGPD.