Privacy Policy

Last updated: 20 October 2026

In short: The RPad apps do not collect, store or share any personal data. There are no accounts, analytics, advertising or tracking. Everything you do with RPad stays on your own devices and your local network. If you buy RPad for Windows, we receive your e-mail address and payment record so we can send you your licence key.

Who we are

RPad is developed and published by Nurhak Altin ("we", "us"), the data controller for the purposes of the EU General Data Protection Regulation (GDPR). Contact: nurhakaltin@gmail.com.

The RPad apps

Data we collect

None. The RPad apps for iPhone, iPad, Apple Watch, Mac, Windows, Linux and Android do not send any information to us or to any third party, and we operate no servers for the apps. RPad for Windows and RPad for Linux check their licence key on your PC without contacting us.

Data that stays on your devices

Pairing information. When you pair, your iPhone or iPad and your Mac each store a random device identifier, the other device's name and a secret key in the Apple Keychain. It is used only so your devices recognise each other, and it is not synced to iCloud or included in backups.
Windows, Linux and Android. RPad for Windows keeps the same pairing information in a file in your Windows user profile, protected with Windows Data Protection (DPAPI). RPad for Linux keeps it in an encrypted file in your home folder, with the key in your desktop's keyring (Secret Service). RPad for Android keeps it in app storage protected by the Android Keystore. It never leaves the device.
Settings. Preferences such as tracking speed and natural scrolling are stored locally on your Mac.

What travels between your devices

Pointer movements, clicks, scrolling and the text you type are sent directly from your phone or tablet to your Mac or PC over your local network. They never pass through the internet or any server, are encrypted end to end, and are not stored or logged by RPad.

Permissions

Local Network (iPhone/iPad): to find your Mac and connect to it on your Wi‑Fi.
Accessibility (Mac): to move the pointer, click, scroll and type as instructed by your paired device. RPad does not read the contents of your screen or other apps.
Windows Defender Firewall (Windows): to accept connections from your paired devices on your local network.

Purchases and crash reports

RPad is sold through Apple's App Store. Apple processes your purchase under Apple's Privacy Policy; we do not receive your payment details. If you choose to share analytics with app developers in your device settings, Apple may provide us with anonymised crash reports and usage statistics.

RPad for Android is sold through Google Play. Google processes your purchase with Google Play Billing under Google's Privacy Policy; we do not receive your payment details.

RPad for PC purchases

RPad for PC licence keys (for RPad for Windows and RPad for Linux) are sold on this website through Stripe. Stripe processes your card and payment details under Stripe's Privacy Policy; we never see your card number. From Stripe we receive your e-mail address and the payment record (such as the amount and date). We use them only to issue your licence key, send it to you, send it again when you ask, handle refunds, and keep the records that tax law requires. Your key is e-mailed from keys@rpad.app through Cloudflare Email Sending. We keep no separate customer database; payment records stay with Stripe for as long as tax and accounting law requires.

This website

This website uses no analytics or tracking scripts. Its only form is the licence key form on the RPad for Windows and RPad for Linux pages: the e-mail address you enter is used only to look up a matching purchase in Stripe and, if there is one, to e-mail the key to that address again. We don't store it. The site sets a single cookie, rpad_lang, only when you choose a language, so the site remembers it; it contains nothing else and expires after one year. Without that choice, the site picks a language from your country and browser settings without storing anything. Like any website, our hosting provider (Cloudflare) processes technical data such as your IP address to deliver pages and protect against abuse, as described in Cloudflare's Privacy Policy. If you email us, we use your email only to reply and delete it when it's no longer needed.

Your rights

Because we don't hold personal data about you through the apps, there is usually nothing to access, correct or delete. You can remove all RPad data at any time by forgetting paired devices in the app and deleting the apps. For emails you've sent us and for RPad for Windows purchase records, you can ask for access or deletion (as far as tax law allows) by writing to nurhakaltin@gmail.com. If you are in the EU/EEA, you may also lodge a complaint with your local data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

Children

RPad is suitable for all ages and does not knowingly collect information from anyone, including children.

Changes

If this policy changes, we'll update this page and the date at the top.