Zeptap is made by Afterlume Labs ("we"). This policy covers the Zeptap Mac app and zeptap.com. The short version: your iPhone's screen, what's typed on it and your passcode stay on your Mac. We never see them.
What stays on your Mac
- The iPhone's screen, captured over USB, and the text Zeptap reads from it (on-device, with Apple's Vision framework).
- Everything you or an agent types, taps or says in the built-in chat.
- Your iPhone passcode, if you save it for local unlock. It's kept in the macOS login Keychain, never synced to iCloud, and never given to agents.
- Recordings and screenshots you save.
The MCP server only accepts connections from your own Mac. When you connect an agent (Claude Code, Codex, Cursor or others), it receives screenshots and screen text so it can do what you asked, and sends them to its model provider under your agreement with that provider. The built-in chat works the same way, on your own Claude or ChatGPT plan.
The technical details are in the privacy and security docs.
What we do collect
Purchases
Payments are handled by Dodo Payments, our merchant of record. Dodo collects your name, email, billing address and payment details, and shares your email, license key and order details with us so we can support you. We never see your full card number.
License checks
To activate and re-check your license, the app sends your license key and this Mac's activation ID to Dodo's license service, about once a day. To enforce the 3-iPhone limit, it sends our server a one-way hash of each iPhone's identifier, the iPhone's name and model, and a hashed form of your license. We keep these while your license is active.
Usage stats and crash reports
The app sends anonymous usage events (which features and tools are used, how long things take, whether they worked, the app and macOS versions, and the Mac and iPhone models) and crash reports. They carry a random install ID, not your name or email, and go through our server, which drops your IP address before passing them to PostHog, our analytics provider. They never include screen contents, typed text, chat messages, device names, identifiers, passcodes or license keys. You can switch either off in Settings › Preferences.
Updates
The app checks for updates once a day against a feed hosted on GitHub, which sees your IP address like any web request.
This website
zeptap.com has no analytics, advertising or tracking cookies. It's served by Cloudflare, which processes standard request data such as IP addresses to deliver and protect the site.
Who we share data with
- Dodo Payments: payments, tax, invoices and license keys.
- PostHog: anonymous usage stats and crash reports.
- Cloudflare: hosting for the website and our license server.
- GitHub: app downloads and update checks.
We don't sell personal data, and we don't share it for advertising.
Your choices and rights
You can turn off usage stats and crash reports at any time, remove an iPhone from your license in Settings › License, and ask us to access, correct or delete the data we hold about you. Email saransh@afterlumelabs.comand we'll reply within 30 days. Purchase records may need to be kept for tax reasons.
Children
Zeptap isn't directed at children under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top. Significant changes will also be noted in the release notes.
Contact
Questions about privacy: saransh@afterlumelabs.com.