Surround Display Privacy Policy

Summary

Surround Display is a local-first tool that processes display, system audio, and input data between nearby devices that the user explicitly authenticates. No account is required. Display pixels, system audio, keyboard input, pointer input, and raw camera or microphone samples are not uploaded to Peaceful Journey servers.

We do not sell personal data or track users across other companies' apps or websites. The current app does not include advertising, behavioral analytics, session replay, or remote crash-reporting SDKs.

Local Display And Input Data

When the host Mac captures a display selected by the user, the display data is compressed and encrypted in memory for delivery to an authenticated receiver. If mobile touch input is enabled, pointer movement, left-click and drag data for that receiver's display is sent to the host over the encrypted connection.

This display and input data is not stored on Peaceful Journey servers or associated with an account. Active input and video session state is ended when the connection closes or the app or display becomes inactive.

System Audio And Synchronized Speakers

When the user enables a speaker role, the host Mac may use the granted Screen & System Audio Recording permission to process system-audio samples and format metadata. Required channel data is transformed and encrypted in memory and sent directly to the receivers the user assigned.

Active source audio is not saved to a file or uploaded to Peaceful Journey servers. A receiver may retain session data such as its channel role, presentation time, buffer state, and synchronization status. Playback queues and session keys are discarded when the connection ends. Protected content and audio the operating system does not permit the app to capture remain unavailable.

Device Discovery, Authentication And Local Storage

To discover and directly connect nearby devices, Surround Display may process device names, app roles, network addresses, capabilities, and temporary connection identifiers on the local network. The first-time six-digit code shown by the receiver is used only for verification; the code itself is not sent over the network or written to logs.

Surround Display stores an approved device ID and public identity key in each device's Keychain so that later connections can detect an unexpected identity change. Display layout, transport policy, quality, display mode and user-selected input settings may remain in local app storage. The in-app trust reset removes stored peer trust. Removing the app deletes ordinary app-container settings; using the in-app reset first is the most reliable way to remove app-created Keychain trust records.

Permissions

• Screen & System Audio Recording: used by the host Mac to send a selected display and, when a speaker role is enabled, system audio to a receiver.
• Local Network: used to discover nearby receivers and open authenticated display and control connections.
• Accessibility: used to perform pointer clicks and drags on the host Mac only when the user enables mobile touch input.
• Camera: used only after the user starts automatic display-layout calibration and approves each camera round.
• Microphone: used only after the user starts acoustic or listener-position measurement and prepares the device to measure a short test signal.

Declining a permission disables the related feature. Permissions can be changed in macOS, iOS or iPadOS system settings.

Camera-Based Display Calibration

Calibration analyzes screen-corner markers from rear-camera frames on the device. Raw photos or video are not sent over the network, saved to files, or added to the Photos library. Only results such as marker identifiers, normalized corner coordinates, frame dimensions and confidence are sent to the host over the authenticated encrypted local connection.

If the user cancels, the app becomes inactive, or the camera stops, new frame processing closes and pending frames and results are discarded. A calculated layout is saved only after the user reviews and applies it.

Microphone-Based Acoustic Measurement

Acoustic measurement uses the built-in microphone only for the short interval the user starts from the measurement screen. The app may detect a test signal and calculate numeric results such as arrival time, relative level, signal-to-noise ratio, reflection indicators, and confidence. These results are not absolute sound-pressure-level or medical hearing measurements.

Microphone PCM, conversation, and ambient voice content are not transmitted off the device or saved to files. Only validated measurement numbers are sent over the authenticated local control connection. If ambient noise is high or confidence is low, the result is not applied and the user is asked to retry. Microphone input is never monitored through the speakers.

Background Audio, Now Playing And In-App Purchases

If the user keeps a speaker session active while switching apps or locking the screen, the receiver may use iOS or iPadOS background audio. The group name, current channel role, and playback state may appear in Now Playing on the Lock Screen or Control Center; the operating system displays that information locally.

Surround Speaker and Speaker Studio are being prepared as non-consumable App Store in-app purchases. Apple StoreKit processes purchase, restore, refund, revocation, and transaction verification. The app processes the product identifier, verified transaction identifier, and current entitlement state, but never receives the customer's payment-card number or Apple Account password. A local preference alone can never unlock a paid function.

Diagnostics, Support And Website Downloads

App logs are designed not to contain display content, six-digit codes, encryption keys, or full network addresses. If a user requests support, only the device types, OS versions and reproduction details the user voluntarily provides are used to handle the request. Do not send display content, pairing codes, keys, or other sensitive information.

The official website and future package storage may use web-delivery infrastructure such as Cloudflare Pages and R2. Standard HTTPS processing may expose connection metadata—including IP address, request time, requested path, and browser or app user-agent—to that infrastructure for delivery, security, and abuse prevention. A Peaceful Journey account or email registration is not required to download the app.

Retention, Deletion And Policy Changes

Surround Display servers do not hold account records of display, audio, input, or raw camera and microphone data. Local preferences, trust records, speaker assignments, and calibration measurements may remain until the user resets them in the app or removes the app. Information voluntarily sent in a support email is retained only as needed to handle the request, investigate security issues, and meet legal obligations.

Automatic updates remain disabled until update signing and recovery are validated. If privacy practices change, the app or this page will identify the change and date. New permissions or new server transmission will not be silently enabled.

Contact

For Surround Display privacy or security questions, put Surround Display in the subject and contact [email protected].