RigSpark
RigSpark for iPhone: privacy
The iPhone app reads what your Macs are doing from your own private iCloud. It has no advertising and no tracking. Two optional features involve RigSpark's servers, both below: the "Mac went silent" alert, and signing in to your account.
What the app reads and where it comes from
- Your Macs' status. RigSpark on your Macs writes each computer's name, battery and memory, what each task is doing, and what waits for you, to the private CloudKit database of your own iCloud account. The iPhone app reads it from there. Apple stores it under your Apple ID; we can't read it.
- On the phone. The app keeps a copy in its own storage on your iPhone for widgets, Live Activities and notifications. Deleting the app deletes it.
- Face ID. Approvals use Face ID through iOS. The app only learns whether the check passed, never your face data.
- Notifications. Alerts come through Apple's push service from your own iCloud. You can turn them off in Settings.
- Links. Tapping a link opens it in your browser.
What the app doesn't do
- No advertising, tracking or third-party SDKs. The only usage we keep is the day a signed-in account last used the app (below).
- No account needed. Signing in is optional; what reaches RigSpark's servers is described below.
- No selling or sharing of personal data.
The "Mac went silent" alert
A Mac that loses power or internet can't warn you itself, so rigspark.si watches for silence on your behalf:
- How it works. While awake, each of your Macs sends rigspark.si a short "I'm here" every minute, and a last one when it goes to sleep or shuts down. If an awake Mac stops for 5 minutes, rigspark.si sends your iPhone a notification through Apple's push service; when it comes back, another.
- What rigspark.si stores. For each Mac: a random id, its name (such as "Mac mini"), its time zone and when it last checked in. For each iPhone: its Apple push token. Nothing about your work or your files.
- Whose they are. This doesn't use your account, even if you sign in. Your devices share a random key that lives only in your own private iCloud; rigspark.si keeps a one-way hash of it, so it can't tell who you are, and nobody without your iCloud can add a device or receive your alerts.
- The iPhone's part. The app puts its push token in your private iCloud; your Mac passes it on with its check-in. For this feature the iPhone itself never contacts rigspark.si.
- Deleting it. Records not updated for 30 days (Macs) or 60 days (iPhones) are deleted automatically.
Signing in (optional)
- What it's for. Settings → Account lets you sign in with Apple or Google to link the app to your RigSpark account and see its details. The app works the same without it.
- How it works. Sign-in happens on rigspark.si in a private browser sheet, with Apple or Google. The app keeps a session token in this iPhone's Keychain (not backed up, not synced) and uses it to ask rigspark.si for your account details.
- What rigspark.si gets. Your name and email from Apple or Google (with Sign in with Apple you can hide your email), your account id, and the day you last used the app or the site, so we can count active accounts. It's the same account as on rigspark.si; nothing about your Macs' work or files.
- Signing out and deleting. Sign out in Settings → Account removes the token from the iPhone. To delete your account and its data on rigspark.si, open an issue on GitHub (below) and we'll remove it.
TestFlight betas
If you test through TestFlight, Apple shares crash reports, and any feedback or screenshots you choose to send, with the developer under Apple's privacy policy. We use them only to fix the app.
Deleting your data
Delete the app to remove its data from your iPhone. To remove the synced data from iCloud, open Settings → your name → iCloud → Manage Account Storage on your iPhone and delete RigSpark's data.
Contact
Questions: open an issue on GitHub. Help with the app: support.