Privacy policy

01 / PichLabs website

This policy covers the PichLabs website and our apps, Cleanup Go, CarCast, and RemoteGo. This website does not use our own analytics cookies or advertising trackers. Our hosting provider may process technical information such as IP addresses, browser details, and server logs to deliver and secure the website.

02 / Cleanup Go — on-device privacy

Cleanup Go analyzes and processes your photos and videos entirely on your device. We do not upload your photo library, media, or analysis results to our servers. The app does not require an account and does not include advertising, analytics services, or cross-app tracking.

Photo library access

With your permission, Cleanup Go uses Apple’s Photos APIs to review the media you allow it to access, identify cleanup suggestions, create compressed videos or still images, and delete items you confirm. You can allow access to selected photos or your full library and change or revoke access in iOS Settings. Limited access may limit results.

Local information

Cleanup Go stores review selections, protected items, optimization records, cleanup totals, and purchase-related app state locally. Local data is subject to your device’s security and Apple’s backup settings. Removing the app clears its app-local data, but does not remove media saved to Photos or reverse previous deletions.

iCloud and Apple services

If you use iCloud Photos, Apple may download cloud-only media to your device for review and synchronize library changes, including deletions, across your devices. This is handled by Apple under your settings and Apple’s privacy policy; Cleanup Go does not upload your library to PichLabs.

Optional in-app purchases are handled by Apple. Cleanup Go uses Apple’s StoreKit to check purchase entitlements and restore purchases. We do not receive your payment card details. Apple processes App Store transactions under its own terms and privacy policy.

Optional support reports

If you choose to send a support email, we receive your email address, message, and any attachment you select. The in-app support form includes the app version, iOS version, device model, and photo permission status. You can review these details and the email before sending. Nothing is sent automatically, and library photos are not attached automatically. Avoid including sensitive information you do not want to share.

03 / CarCast — media and connected services

CarCast is a player for content and sources you provide. It does not require a PichLabs account. We do not operate a server that receives your media library, source credentials, browsing activity, or playback history. CarCast does not include first-party advertising or analytics tracking.

Media sources and network requests

When you add playlists, stream media, load artwork, download media, or connect services such as Plex, Jellyfin, Emby, or Xtream-compatible servers, CarCast connects to the selected providers. They receive your IP address, requested content, and any credentials or tokens needed to authenticate. Plex sign-in also communicates with Plex’s services. These providers apply their own privacy policies and may log requests. Use sources you trust; unencrypted HTTP connections may expose requests or credentials to others on the network.

Information stored on your device

CarCast stores your sources, media references, favorites, playback progress, and preferences locally. Its library records are encrypted using a key held in the iOS Keychain. Source URLs and playback links may contain access tokens or credentials. Imported or downloaded media is stored on the device; library-record encryption does not mean every media file is encrypted separately by CarCast. Device backups are governed by your Apple settings.

Photos, files, and connected displays

CarCast accesses photos, videos, and files you select or authorize for import and playback. Apple may retrieve cloud-backed items when you access them. Local network features communicate with compatible devices and may require local network permission. Media, screen content, and app audio may be presented on a connected display or receiver when you start those features. Only use displays and networks you trust.

Browser and screen sharing

The in-app browser connects to websites you open. Those sites can receive your IP address, form submissions, and request information, and can store cookies and website data through iOS WebKit. Bookmarks are saved locally. Their tracking and data practices are controlled by those websites, not by CarCast or PichLabs.

Screen sharing uses Apple’s broadcast controls to capture screen content and app audio for local relay to CarCast and the connected display. Sensitive content or notifications visible on screen could be shown. Review what is visible before starting and stop sharing through the system broadcast controls when finished.

Choices and support

You can remove sources and imported items in the app and manage permissions in iOS Settings. Removing an item from CarCast does not necessarily delete its original or revoke a provider’s access token. Manage sessions and account access with the relevant provider. Uninstalling removes the app’s local container but may not remove Keychain entries, device backups, or provider records.

CarCast can generate a connection report that you may choose to share. The report excludes media URLs, credentials, and account identifiers. Review any report, screenshot, or email before sending it; we receive only what you choose to send to us. Contact hello@pichlabs.com for CarCast support.

04 / RemoteGo — your machines and connections

RemoteGo connects your iPhone or iPad directly to computers and servers you add. It does not require a PichLabs account, and we do not operate a relay or any server that receives your screens, keystrokes, terminal sessions, files, credentials, or machine list. RemoteGo does not include advertising, analytics services, or cross-app tracking.

Connections to your machines

When you connect, RemoteGo talks to the host and port you entered using Screen Sharing (VNC), Remote Desktop (RDP), or SSH and SFTP. That machine receives your IP address, the user name and password, key, or one-time code you provide, and everything you send in the session, including keystrokes, pointer input, commands, and uploaded files. The machine’s own logs and policies apply. If you connect through Tailscale or another VPN, that service handles the traffic under its own terms. Some VNC servers do not encrypt the session; use SSH tunnelling or a VPN when connecting over networks you do not trust.

Information stored on your device

Your machines, connection settings, snippets, SSH public keys, and preferences are stored locally on your device. Passwords, private keys, and key passphrases are stored in the iOS Keychain, restricted to this device, and can be protected with Face ID, Touch ID, or your passcode. Trusted SSH host keys and Remote Desktop certificate fingerprints are stored locally so RemoteGo can warn you if they change. Files you download over SFTP are saved to a temporary folder on your device until you open, share, or remove them, or iOS clears it. Device backups follow your Apple settings.

Local network, Wake-on-LAN, and clipboard

With local network permission, RemoteGo looks for Macs and SSH servers on your network using Bonjour, and sends Wake-on-LAN packets containing the MAC address you entered when you choose to wake a machine. During a desktop session, text copied on the remote machine may be placed on your device’s clipboard, and RemoteGo sends your device’s clipboard to the remote machine only when you choose to.

SSH key installation

When you choose to install a key on a server, RemoteGo signs in with the credentials you provide and adds your public key to that account’s authorized keys. Your private key does not leave your device. You can remove the public key from the server at any time.

Choices and support

You can edit or delete machines, keys, and snippets in the app, and change local network and Face ID permissions in iOS Settings. Deleting a machine removes its saved passwords from the Keychain. Removing a key from RemoteGo does not remove it from servers where it was installed. If you email us for support, we receive only what you choose to send. Avoid sending passwords, private keys, or screenshots that show sensitive information. Contact hello@pichlabs.com for RemoteGo support.

05 / Support information, retention, and sharing

We use information you voluntarily send to answer questions, troubleshoot issues, maintain support records, and meet legal obligations. We do not sell personal information or use support attachments for advertising.

We retain correspondence only as long as reasonably needed for these purposes. Our email and hosting providers process information needed to operate their services, and information may be disclosed where legally required or necessary to protect rights and security. These providers may process information in countries other than yours. These practices concern website and support information, not access to your on-device library or the machines you connect to.

06 / Your choices and rights

Manage photo permissions in iOS Settings and your media in Apple Photos. We cannot access, recover, or delete your on-device library remotely. For personal information you have sent us, you may request access, correction, or deletion, and exercise other rights available under applicable law, by emailing hello@pichlabs.com. You may also have the right to complain to your local data protection authority.

07 / Children’s privacy

We do not knowingly collect personal information from children through support correspondence. If you believe a child has sent us personal information, contact us so we can address it and delete it where required.

08 / Changes and contact

We may update this policy as our products or practices change. We will publish revisions here and update the effective date. Cleanup Go support: gocleanup@pichlabs.com. CarCast, RemoteGo, and privacy questions: hello@pichlabs.com.

Effective date

October 31, 2026