Privacy Policy

DroidM8 does not collect, store on any server, or transmit your personal data to us or to any third party. There is no account system, no login, no analytics SDK, no crash reporter, no remote configuration, and no advertising. Everything happens between the two devices you pair — your Android phone and your Mac — over your own local network.

• Clipboard contents.When clipboard sync is enabled, the app reads the text you copy on one device and writes it to the other. The text is also saved to a short local history (Android: in the app's Room database; macOS: in UserDefaults) so you can re-copy past items. Both are kept on-device.
• Notifications. With notification access granted, the app reads posted notifications to mirror them to the paired Mac (and to match your DND-bypass rules on-device). Notification text never leaves your local network.
• Pairing PIN, device name, and host/port.A 6-digit PIN you set or accept; a friendly device name; and the local network endpoint of your paired device. Stored locally on both apps. The PIN is used as the password for an AES-GCM key derived via PBKDF2-HMAC-SHA256 (120,000 iterations) — see “Encryption” below.
• DND-bypass rules and suppression lists.Per-app rules, keywords, and suppression entries you create. Stored in the Android app's Room database. Optionally backed up to a file you choose via the system file picker — never uploaded by the app.

When the two apps are paired, they communicate over a TCP connection on your local network (Bonjour-discovered, port assigned by the OS). The only payload is the clipboard text you copied and the notifications you choose to mirror. No other identifiers, telemetry, or diagnostic data are transmitted.

• Each frame is encrypted with AES-GCM (256-bit key, 96-bit nonce, 128-bit tag) using a key derived from your PIN via PBKDF2-HMAC-SHA256 with 120,000 iterations and a fixed salt.
• The key is never sent over the network — both sides derive it independently from the same PIN + salt.
• The PIN is stored locally in the app's encrypted preferences; the derived key is held only in memory.

• Notification access — used to read posted notifications so the app can mirror them to your Mac and match your DND-bypass rules on-device.
• Accessibility service— used to read your clipboard in the background so the “auto-send” flow works without a foreground app. Disabled by default; opt-in only.
• DND policy access — required to post high-importance re-alerts that bypass Do Not Disturb for your matched rules.
• Companion device pairing — used on Samsung One UI to read the clipboard in the background without the accessibility service. Optional.
• Shizuku — used on Samsung One UI as an alternative path to read the clipboard in the background. Optional.
• Local network — used to discover and connect to your paired Mac over Bonjour.

• Full Disk Access— required for Mac → Phone notification mirroring (the app reads macOS's notification database, which is protected by TCC).
• Local Network — required on macOS 14+ for Bonjour discovery of your paired phone.
• Notifications — required to display the mirrored Android notifications as native banners.

DroidM8 does not collect data from anyone, including children, and is suitable for general audiences.

DroidM8's code is open source. You can audit exactly what the app does — the network protocol, encryption, and storage. See the project repository for the Android client and the macOS companion.

If this policy changes, the updated version will be posted on this page with a new “Last updated” date.

Questions about this policy? Contact us at [email protected].