CarryOnPrivacy
October 30, 2026. This covers the test version of CarryOn for iPhone, iPad and Mac.
CarryOn lets you see and steer your own Mac from your iPhone or iPad. Your Mac's screen, sound, keys, clipboard and files go only between your own devices. A few features use AI, and those requests go to an AI provider. This page says what goes where.
Between your devices
The picture and sound of your Mac, your touches and keys, the clipboard and the files you move go directly between your Mac and the iPhone or iPad you paired with it, encrypted end to end. When they pass through a relay (Tailscale's, or the relay CarryOn's connection uses), the relay sees addresses and timing, never what is sent. We never receive any of it.
Your CarryOn account
The app makes an anonymous account the first time it needs CarryOn's server: a random id, the device model and the system version. It has no name, email or phone number.
AI features
These features send what they need to an AI provider through CarryOn's server, which runs behind Cloudflare:
| Feature | What is sent | To |
|---|---|---|
| Dictation and Live Translate | Your voice while you dictate | Google (Gemini) |
| Talking to Cara | Your words, and the words and controls on your Mac's screen, app and folder names, recent history and notes, as each request needs | Google (Gemini) and OpenAI |
| Cara's decisions on your Mac | Your words and a picture of the window she works in | OpenAI |
| Mac Activity explained | The names of busy processes and their load | Google (Gemini) |
| Spoken answers (off at first) | The text to be spoken | ElevenLabs |
| Voice messages written out | The voice message | Google (Gemini) |
CarryOn's server passes these on and keeps no words, voices or pictures. It keeps one usage record per request: the anonymous account id, the feature, the amount used, the cost and the time, to run the service and keep it within its limits. If you add your own AI keys in Settings, most of these requests go from your devices to the provider directly, without CarryOn's server. Each provider handles what it receives under its own privacy terms.
On your Mac
- Cara's Claude is your own Claude Code, signed in to your own Anthropic account on your Mac. What it reads goes to Anthropic under your account, not through CarryOn.
- My Telegram, if you turn it on, signs in to your own Telegram account from your Mac, as any Telegram app does.
- Notes from your Mac are sealed on the Mac with a key only your devices hold. CarryOn's server and Apple carry them sealed and can't read them.
- What Cara asked, her answers and what she remembers are kept on your Mac. Settings › Cara clears them.
Testing
In this test version, developer mode can be turned on by hand. It keeps more detailed logs, on the device only, for finding problems. TestFlight shares crash reports and the feedback you send with us, as Apple describes in TestFlight.
What we don't do
We don't sell data, show ads, or track you across other apps and websites.
Questions and deletion
Write to [email protected] with any question, or to have your account's usage records deleted.