A privacy compact, in four parts
Rigward turns your phone into a remote for the PCs you already own. Wake them on LAN, jump between them, and drive a desktop session over SSH and Tailscale — with nothing in the middle that can see what you’re doing.
Built by one. Free tier is fully functional.
The privacy guarantees are the same on every tier.
When your phone sends reboot now or code ., the
instruction rides an SSH session that is end-to-end between your phone and
your PC. Our servers are not in the path. No proxy, no command bus, no relay.
Remote desktop is x11vnc bound to localhost on the target,
port-forwarded over SSH inside the Tailscale tunnel. Pixels live on your
two devices. No pixel relay. No recording server. No “join with code.”
Transit is Tailscale (WireGuard) with a coordination plane. The data plane is peer-to-peer wherever NAT allows it. Either way it’s not our relay. We don’t run network infrastructure. We have nothing to log.
Email. OAuth token. Payment status. That’s the entire row. It’s the same data Stripe, Google, and Apple already hold. If our servers are rooted tomorrow, the worst an attacker gets is a list of email addresses.
We are not on the call. Your phone talks to your PC, and we sell the app that introduced them.
We’re not going to pretend the server is empty. There is exactly one table that holds anything about you, and these are its three columns. We’d publish the schema if it weren’t already visibly the schema.
No telemetry. No usage logs. No device list. No command history. No IP logs beyond what is required to terminate the TLS connection for the sign-in flow itself.
So we can identify your account and contact you about your account. Nothing else.
So you can sign in with Google or Apple without us storing a password. The token authenticates you to us, not to your devices.
Active, lapsed, trialing. We need it for entitlements. Stripe holds the card; we hold a bit.
sshd_config:
PasswordAuthentication no, PermitRootLogin no,
KbdInteractiveAuthentication no, MaxAuthTries 3.
x11vnc bound to 127.0.0.1, surfaced through an SSH
port-forward. No VNC port listens on any reachable interface.
Fully functional for a single device. Forever. The privacy model is identical to paid.
When one rig isn’t enough, or you want scheduled actions to do the boring parts.
We don’t gate the security model. There is no “pro” tier where we suddenly start seeing more. The promise on this page is the same on every plan.
Free tier is the whole product for a single machine. Pair your phone, point it at a PC you own, and see how it feels when the middle isn’t there.