Signing in does not reveal a computer
An account tells us who you are. It does not hand over your machines. You link each computer deliberately, by scanning the code it shows — so a stolen password is not a stolen laptop.
Your Mac, on your phone.
Pair once with a QR code, then reconnect forever. At home, Lilypad connects directly over your own network — no internet required.
macOS iOS
Not yet released publicly. See Get it for where builds will appear.
It takes the cheapest path that works
Lilypad tries three routes in order and stops at the first one that connects.
-
On your network
Your phone talks to your Mac directly. Nothing leaves your home, and it works with the internet down.
-
Peer to peer
Away from home, your phone and Mac connect straight to each other across the internet wherever the network allows it.
-
Relayed, only if it must
When a network blocks a direct connection, traffic is meant to be relayed, staying end-to-end encrypted in transit (DTLS-SRTP) the whole way. No relay is running yet, so today a session that cannot connect directly will fail rather than fall back. The first two paths are the ones that work.
On the first two paths your screen never passes through our servers. Lilypad is built on WebRTC — there is no custom video protocol.
Knowing your computer's name is never enough
No silent access
A session has to be approved on the Mac. Nobody connects to a machine that is not expecting them.
Every device proves itself
Each phone and Mac holds its own key, kept in the system keychain, and proves who it is on every connection.
Removing a device is immediate
Remove one from your account and it loses access straight away — including a session running at that moment. It does not wait for a token to expire.
Ask it to do things
Ask is an assistant that drives your Mac. It runs on the Mac itself — not in our cloud.
- It asks your phone before it does anything consequential.
- You can take over at any moment.
- Bring your own API key — Anthropic, or any OpenAI-compatible endpoint. Your key stays in your Mac's keychain.
What actually runs today
| Platform | Status |
|---|---|
| macOS | Supported Universal build. Not yet signed or notarized — macOS will warn on first open |
| iOS | Supported iPhone. No public install path yet — TestFlight needs a paid Apple developer account |
| Windows | Not yet Not validated on real hardware |
| Android | Not yet Not validated on real hardware |
Windows and Android are listed as unavailable on purpose. Code exists for both, but neither has been proven on a real machine, and shipping is not the same as working.
Plans
Using Lilypad on your own network is always free. It costs us nothing to run, so there is nothing to charge for. We only meter the two things that genuinely cost money: relayed minutes, and AI we pay for on your behalf.
Free
$XXXX
- Unlimited sessions on your own network
- Unlimited direct peer-to-peer sessions
- A monthly allowance of relayed minutes
- Remote control, input and clipboard
- Multiple devices
- Ask with your own API key
Pro
$XXXX
- Everything in Free
- A higher relay allowance
- Managed AI — no key of your own to supply
- Premium models
- Extended history
- Priority support
Team
$XXXX
- Everything in Pro
- Team and business features
Prices are not set. $XXXX is a placeholder, and the
allowances above are not yet quantified. Nothing here is an offer.
Get it
Download for macOS — v0.1.0, universal, 20 MB.
macOS ships as a universal build through GitHub Releases, and installed copies update themselves from it. It is not signed or notarized yet: on first open macOS says it “cannot verify Lilypad is free of malware” and offers only Move to Trash or Done. To run it anyway, open System Settings → Privacy & Security and choose Open Anyway. A paid Apple developer account is what removes this step.
The iPhone app has no public install path today. TestFlight also requires that paid account, so the phone side currently has to be built from source with Xcode.