KVM Remote

Privacy policy

Last updated: 12 September 2026

1. Who we are and what this policy covers

KVM Remote is provided by Peth Pty Ltd (ACN 652 727 136), an Australian company. In this policy, “we”, “us” and “our” refer to Peth Pty Ltd. “You” refers to a person using KVM Remote or contacting us.

This policy covers the KVM Remote website at www.kvmremote.app, the KVM Remote apps for Mac, iPhone and iPad, and enquiries about these services. It describes the current website and the pre-release apps. It does not describe the data practices of our other products, of your KVM device vendor, or of the computers you control through a KVM.

Personal information means information about an identified or reasonably identifiable person. We handle personal information in accordance with applicable privacy law, including the Australian Privacy Act 1988 and Australian Privacy Principles where they apply. The additional rights described below apply where EU or UK data protection law applies to our processing.

2. Connections to your devices

The app connects directly to the KVM devices you add. The login details you enter and every keyboard, mouse and touch action you make in a console are sent to that device so it can act on the remote computer. Video and, where you enable it, audio travel from the device to the app. The app does not include advertising, analytics or a developer-operated account service, and no connection passes through a server operated by us. We do not automatically receive your device credentials, remote screen content or input.

Connection setup may use STUN or TURN servers supplied by your device or its firmware. Those operators can receive connection information such as IP addresses. Your device vendor and your network provider have their own privacy practices, which this policy does not cover. A connection you explicitly configure as plain HTTP is not encrypted.

3. Information stored on your iPhone, iPad or Mac

Saved device names, addresses, usernames, groups, console preferences and certificate trust records are stored locally in the app’s container. If you choose to remember a password, it is stored in Apple’s Keychain, keyed to the device entry; it is not written to the saved-device file. One-time verification codes are used to authenticate and are not saved as passwords.

The app does not provide its own cloud synchronisation. Your operating system’s backup and restore may retain app data according to your device settings. Removing a device requests deletion of its saved Keychain password; some preferences and certificate trust records are stored separately and remain until you remove them.

4. Screen content, clipboard, files and local media

Screen text recognition runs on your device. Screen snapshots, recognised text, copied text and diagnostic exports are saved or shared only when you request them, to the destination you choose. Files you select for virtual media are sent to the selected KVM device. Clipboard text is sent to the remote computer as keyboard input when you use a paste or typing command; clipboard contents are never logged or synchronised by the app.

Remote audio playback does not capture your microphone. If you explicitly enable microphone or camera sharing on a supported device, the app requests the corresponding system permission and streams that media to the selected KVM for use on the remote computer. The app does not save a local recording. Sharing stops on disconnect, on connection failure, in view-only mode, and when the console moves to the background; reconnecting does not restart it.

5. Information we and our providers may receive

Website requests. Cloudflare delivers and protects the website. In doing so it may process IP addresses, request times, requested URLs, browser or device information, and other network or security information. We may receive operational information made available through the hosting service.

Website analytics. The website uses Google Analytics to measure visits and usage. See section 6.

Communications. If you contact us, we receive the contact details and message contents you provide, and any troubleshooting information you choose to include. Please share only what is needed to handle your enquiry, and never include passwords, verification codes or sensitive remote screen content. You can use the app without giving us a name, email address or account.

Sensitive information. We do not seek sensitive information such as health, biometric, financial, political or religious information, and we ask that you leave it out of enquiries. If you include it anyway, we handle it under this policy and delete it once the enquiry is closed.

Contact form and spam protection. Our contact form collects an optional name, email address, enquiry type and message. We use Cloudflare Email Service to send these details to our team’s inbox. The form does not accept attachments. Cloudflare Turnstile processes browser, device and network signals to prevent automated abuse; it loads only on the contact page. See Cloudflare’s privacy policy.

Diagnostics and beta testing. The app keeps a bounded local diagnostic buffer and writes events to Apple’s system log. Credentials, authentication response bodies and request query values are redacted, but diagnostics can still contain device names or network details; review an export before sharing it. No diagnostic upload to us is automatic. During TestFlight testing, Apple may collect usage, crash information and feedback under its own terms and privacy policy and make beta reports available to us.

App Store services. Apple handles App Store downloads, payments, refunds and related account services. We do not receive your payment card details from those transactions. Apple may make transaction information, sales reports, reviews or diagnostics available to developers according to its services and your settings. See Apple’s privacy policy.

6. Cookies, analytics and advertising

The KVM Remote website uses Google Analytics to measure website visits and usage and help us improve the site. Google Analytics uses cookies and processes information such as pages visited, browser and device details, identifiers and approximate location derived from network information. Google may process this information on servers outside Australia, including in the United States. See Google’s privacy policy.

Our website configuration disables Google Signals and advertising personalisation, and omits query strings and fragments from the page-view URL. We do not send contact-message text as analytics events. You can block analytics through browser privacy controls or Google’s Analytics opt-out browser add-on. The apps do not include third-party advertising or usage-analytics SDKs. We do not sell information obtained through KVM Remote or share it for targeted advertising.

Local app preferences are not advertising identifiers. External websites you choose to visit may use their own cookies or tracking technologies.

We use information we actually receive to respond to enquiries, provide requested support, maintain and protect the website, investigate faults or abuse, administer purchases or disputes where relevant, and meet legal obligations. We do not use your KVM sessions as a source of marketing data.

Where EU or UK data protection law applies, Peth Pty Ltd acts as controller for the personal information it processes for these purposes. Depending on the circumstances, the lawful basis is performance of a contract or steps you request before a contract; our legitimate interests in operating a reliable service, responding to enquiries and preventing abuse; compliance with legal obligations; or consent where required. If we rely on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

We do not use KVM Remote to make decisions about people with legal or similarly significant effects through automated processing.

8. Disclosure and overseas handling

We may provide information we hold to personnel and service providers who need it for hosting, communications, support or business administration; to professional advisers where necessary; or to authorities when legally required. A business transfer may involve relevant records, subject to applicable law and appropriate protections. This does not give us access to data that remains on your device or your KVM.

Peth Pty Ltd is based in Australia. Cloudflare, Google and Apple operate internationally, including in the United States, and website requests or information you provide may be processed outside Australia through their global infrastructure. Where we arrange a transfer that requires legal safeguards, we will use the safeguards required by applicable law, such as approved contractual protections or another valid transfer mechanism. Contact us for information about providers and safeguards relevant to information we hold about you.

9. Retention and security

We retain support correspondence and associated records for as long as reasonably needed to handle the enquiry, maintain relevant business records, resolve disputes and meet legal requirements. Retention depends on the type and purpose of the record rather than a single fixed period. We delete or de-identify information when it is no longer needed, subject to lawful retention requirements. Hosting and external-service records are also subject to those providers’ practices.

We take reasonable steps to protect personal information we hold. No storage or transmission method is completely secure. The app’s direct-connection design reduces the information sent to us; it does not control what your KVM device, its vendor, your network, device backups or destinations you share with do with data you give them.

Saved devices and preferences remain on your device until you remove or change them. Disconnect to stop a session, turn off remote audio to stop playback, and revoke Local Network, microphone or camera access in system settings to restrict the app. The in-app diagnostic buffer can be cleared in Diagnostics; system-log retention is managed by the operating system. Exported files and copies you share remain wherever you save or send them until you delete them. Removing the app may not remove Keychain entries, backups or exported files.

10. Access, correction and other rights

You may ask what personal information we hold about you and request access or correction. Where applicable law provides them, and subject to their legal conditions and exceptions, you also have the right:

Contact us using section 11. We may request proportionate information to verify your identity. We will explain any lawful refusal and available complaint options. We cannot retrieve or delete data stored only on your device, on your KVM, or held independently by another provider.

11. Questions, requests and complaints

Write to:

Att: KVM Remote Privacy Officer
C/o Peth Pty Ltd
GPO Box 2342
Brisbane QLD Australia 4001

For other ways to get in touch, visit our contact page. During the TestFlight beta you can also use Send Beta Feedback in TestFlight.

Describe your concern and how we can respond. We aim to respond to privacy complaints within 30 days, or explain if more time is needed, and will meet any applicable statutory time limit.

If your concern remains unresolved, you may be able to complain to the Office of the Australian Information Commissioner or the relevant privacy regulator. Where EU or UK law applies, you may complain to your competent data protection authority, including the UK Information Commissioner’s Office, as applicable.

12. Children

KVM Remote is a general-purpose utility and is not directed specifically at children. We do not knowingly seek personal information from children. Where EU or UK law applies, we do not knowingly process personal information of a person under 16 without the consent of a parent or guardian. A parent or guardian who believes a child has provided us with personal information can contact us to request appropriate action. Store and device age restrictions apply separately.

13. Changes to this policy

We will update this page and its revision date when our practices change. Where a change requires notice or consent, we will provide that notice or obtain consent as required. Publishing a new policy does not itself authorise unrelated use of information already collected.

Our privacy overview offers a shorter explanation. This policy provides the fuller details; both should describe the same practices.