STREAM FRAME BY BOXTREE

Privacy Policy

Effective September 27, 2026 · Boxtree, Inc.

This policy describes Stream Frame for Android, iPhone, iPad, Mac, Windows PC, and Linux, and the streamframe.app website. Stream Frame is a local-network utility. The app has no Boxtree account system, advertising, tracking SDK, analytics SDK, or Boxtree cloud backend.

Information processed on your devices

The app uses the headset address and SSH username you enter to connect to your Steam Frame. It remembers connection preferences locally. On iPhone and iPad, an SSH password is stored in the device-only Keychain only if you choose “Remember on this device.” Trusted SSH fingerprints are also stored in the Keychain. On Mac and Windows, authentication uses the operating system’s SSH tools, your SSH agent and keys, and a separate trusted-hosts file.

The app receives video and selected game/microphone audio from your headset. It displays video on your device and includes selected audio in recordings when enabled. Live preview stays silent. Audio and video settings are saved locally. Recordings and screenshots are saved on your devices when you request them. Headset recording is enabled by default: original MP4 files are stored at /home/steamos/Videos/StreamFrame on your headset, then copied to your Mac or PC, phone, or tablet over encrypted SSH/SFTP or authorized USB. Originals remain on the headset until you delete them. Turning this option off records the received stream directly on the client device. Screenshots are saved on the client device. Video, audio, passwords, addresses, and saved captures are not sent to Boxtree by the app. The bundled sample runs locally and does not connect to a headset.

On Android, optional saved SSH passwords and trusted identities are encrypted with a non-exportable Android Keystore key. Connection preferences and captures are kept in the app’s private storage. Android cloud backup is disabled for Stream Frame. Use Settings → Forget saved credentials & identities to remove saved access, and Captures to remove saved media. Uninstalling or clearing app storage removes the app’s local data; exported or shared copies remain at their chosen destinations.

Network access and permissions

Local Network access lets the app connect to your headset. SSH encrypts authentication and stream-control commands. Video and selected headset audio use unencrypted UDP on your local network; use a network you trust. Stream Frame does not request access to your Mac or PC, phone, or tablet microphone or Photos library. Recording audio comes from the Steam Frame’s game monitor and headset microphone. Before connecting, you can turn recording audio off, disable either source, or change their mix.

Hostnames are resolved using your device’s configured DNS or local-network discovery. Android may briefly use multicast discovery to resolve .local headset names; this does not contact a Boxtree server. On Mac, optional USB (ADB) mode sends commands and receives media directly through an authorized USB connection instead of SSH and UDP. Android SDK Platform-Tools must already be installed, and the headset must be authorized by you.

Optional RTMP broadcasting

On supported desktop and mobile versions, explicitly enabling RTMP publishing and entering an RTMP or RTMPS destination enables experimental broadcasting directly from your headset to the provider you choose. That provider receives the video, selected audio (or a silent audio track), stream key, and ordinary connection information under its own policies. RTMPS encrypts this connection; RTMP does not. The app keeps the destination and key only in memory for the current session and does not save them to preferences or send them to Boxtree. Clear the destination, turn off publishing, or quit the app to remove it.

Installing on your headset

The optional headset installation feature uses your verified SSH connection (or USB ADB on supported desktop clients) to add the signed Stream Frame Flatpak repository and install the Linux application on your SteamOS headset. The headset contacts streamframe.app and, when needed, Flathub to download the app and runtime. These services receive ordinary connection information needed to serve downloads. No mobile application code is downloaded or installed by this feature.

Saving, sharing, backups, and deletion

Mobile Captures can list, download, and delete recordings on the headset you connect to. Remote deletion requires confirmation. Deleting a downloaded copy or uninstalling the app does not delete headset originals. No headset capture is uploaded to Boxtree or a cloud service by these transfer features.

On iPhone and iPad, use Captures to preview, share, export, or delete files. On Mac or PC, captures are stored in the location you select. Sharing a file or saving it to a cloud-backed location sends it to the destination you choose, under that service’s policies. Device or system backups may include app preferences and capture files according to your settings.

In iOS Settings within Stream Frame, use “Forget saved password” and “Forget trusted identity” to remove the corresponding Keychain items. Delete captures from Captures or Files. Deleting the iOS app removes its local app container, but exported copies, backups, and Keychain items may remain. Remove saved access before uninstalling if you want to erase it. On Mac, manage saved SSH access through your SSH configuration. Boxtree cannot retrieve or delete files held only on your devices.

Google Play

Google Play processes purchases, installation information, and platform diagnostics under Google’s policies. Boxtree may receive Android crash and stability reports through Google Play. Stream Frame does not add analytics or advertising SDKs and does not upload your headset stream, credentials, or captures to Google or Boxtree. Android export and sharing use the destination you explicitly choose.

Apple and TestFlight

Apple may provide us with crash reports, diagnostics, and beta feedback according to your Apple privacy and TestFlight settings. Feedback you send can include screenshots, comments, and contact information. See Apple’s TestFlight privacy information. We use submitted feedback to investigate problems and improve Stream Frame, not for advertising.

This website and support requests

This website has no advertising or analytics scripts added by Boxtree. Its hosting providers process ordinary request information, such as IP addresses and browser details, to deliver and secure the site and downloads. Following external links is subject to the destination’s policies.

If you email us, we receive your email address and the information you choose to include. Please do not send passwords or private SSH keys. Support correspondence is used to answer your request and is handled under Boxtree’s privacy notice, including its retention and privacy-rights provisions.

Mac automatic updates

The Mac app checks streamframe.app for stable releases and downloads signed updates using Sparkle. These requests send ordinary connection information, such as your IP address and app version, to our website host. Sparkle system profiling is disabled. You can turn automatic checks and downloads off in Settings. No headset video, audio, credentials, or recordings are sent with update checks.

Windows automatic updates

The Windows app uses WinSparkle to check streamframe.app and download updates. These requests share ordinary connection information with our website host. Update downloads must pass signature and publisher verification. You can enable or disable automatic checks in Settings. No headset video, audio, credentials, or recordings are sent with these checks.

Optional support payments

After you start a Mac or Windows download, the optional support dialog loads an embedded Stripe payment button. Stripe receives connection and browser information to provide and secure this payment feature. The button is not loaded during ordinary browsing before that dialog opens. You can dismiss it without paying, or use the direct Stripe link in the dialog or footer.

If you choose to pay, Stripe processes your payment information and may make transaction and contact details available to Boxtree to administer the payment and answer payment questions. See Stripe’s Privacy Policy. Supporting development is optional and does not change the desktop download or the app’s local handling of your headset video.

Your choices and rights

You can revoke Local Network access in system settings, stop streaming at any time, remove saved credentials, and choose whether to share captures. We do not sell app user data or use it for cross-app tracking. To ask about information you have sent to Boxtree, or request access, correction, or deletion, contact support@boxtree.gg. Depending on where you live, you may also have the right to complain to your local data protection authority.

Children and changes

Stream Frame is a general-purpose utility and is not directed to children. We do not knowingly collect children’s personal information through the app. If a child has sent personal information to support, contact us so we can address it. Updates to this policy will appear here with a new effective date.

Contact

Boxtree, Inc.
131 Continental Dr, Suite 305
Newark, DE 19713, United States
support@boxtree.gg