Privacy policy

Effective 2026-10-10

BothWays links one Android phone to one Mac so you can share the clipboard, files, links, notifications and (on the local network) the phone's screen between them. It is made by lopesfe.com.br (Felipe Natal Lopes, "we").

The short version: BothWays has no accounts, no analytics, no ads and no servers that store anything. Your content travels only between your own phone and your own Mac, encrypted end to end. We never see it.

What the app handles

Only when you use the matching feature, and only to deliver it to your other device:

Clipboard: text and images you copy. Text copied from password managers is never synced.

Files, links and web pages you choose to send through the Share menu or the Mac menu.

Notifications (Android → Mac): the app name, title, text, buttons and any reply you type on the Mac. You can turn this off or exclude apps at any time. Notification access is requested in Android's settings and used for nothing else.

Screen and audio (phone → Mac, local network only): the phone's screen while you mirror it, and in developer mode its audio. Android asks for your consent each time unless you enabled developer mode yourself. Mirroring stops when you close the window or lock the phone.

Remote control (Mac → phone): taps, swipes and keystrokes you make in the mirror window are replayed on the phone through Android's accessibility service. The service is used solely to perform the input you send from your Mac; it does not read screen content or collect anything.

Device names (your phone's and Mac's names) so each side can show which device it is talking to.

How it travels

On your local network, the phone and Mac connect directly over mutual TLS 1.3 with certificates created on each device and pinned to each other during a one-time QR pairing. No one else can join a pair.

Away from your network, the same encrypted connection is forwarded byte for byte by a relay we run on Cloudflare Workers. The relay cannot decrypt anything, keeps no copy, and has no database or logs of content. Like any internet service, it necessarily sees your devices' IP addresses while connected and a room identifier derived from your devices' certificate fingerprints. Cloudflare's own infrastructure handling is governed by Cloudflare's privacy policy.

Screen mirroring is never sent through the relay.

What stays on your devices

Pairing records (the other device's name and certificate fingerprint), your settings (pause, mirrored notifications, excluded apps), and a short connection log on the phone that lists link events, never content. Everything is stored in the apps' private storage.

The last received image is kept in the phone app's cache until the next one replaces it, so it can be pasted.

Files you send land in the receiving device's Downloads folder, where they are yours to keep or delete.

What we collect

Nothing. We have no account system, no telemetry, no crash reporting and no third-party analytics or advertising SDKs. The only Google component is the on-device QR code scanner used during pairing; it is part of Google Play services and covered by Google's privacy policy.

Your choices and deletion

Unpair or uninstall either app and all of its data on that device is deleted. There is nothing to delete on our side, because nothing is stored there.

Children

BothWays is not directed at children under 13 and does not knowingly collect information from anyone.

Changes

If this policy changes, the new version is published on this page and in the app, with a new effective date.

Contact

Questions about privacy: write to the developer email shown on the BothWays Link page in the App Store or Google Play.