Privacy Policy

Information involved in using ShellSSH

• Account information. If you sign in with Google or GitHub, ShellSSH receives information needed to identify your account, such as your name, email address, profile image, and sign-in provider.
• Server and connection information. The app stores the server profiles, connection details, credentials, and SSH keys you choose to add on your device. Terminal sessions and file transfers connect to the remote hosts you select.
• Optional cloud sync. If you enable cloud sync, selected server profiles, credentials, and SSH keys are encrypted on your device before being stored by the ShellSSH service. The service also processes account and sync metadata needed to operate the feature.
• Usage and diagnostics. The Android app uses Google Analytics for Firebase and Google Analytics to measure app usage and feature performance. Events can include screen views, sign-ins, file-transfer actions, ad interactions, and connection events. Connection events can include a server name and port.
• Advertising data. When ads are shown, the Google Mobile Ads SDK may process an IP address, device or advertising identifiers, app interactions, and diagnostic data for ad delivery, measurement, and fraud prevention.

How information is used and shared

ShellSSH uses account information to provide sign-in and account features; server information to make the connections you request; optional cloud data to sync your workspace; and usage data to understand and improve the app. Information is shared with your chosen remote servers when you connect or transfer files, with Google or GitHub when you use their sign-in services, and with Google for analytics or ads as described above. The ShellSSH service receives information required for account and optional sync features.

Your choices

You can use local server features without enabling cloud sync. You can turn cloud sync off and remove local server profiles or keys in the app. Turning sync off or uninstalling the app does not by itself delete information already stored with your ShellSSH account. You can manage your Android advertising ID in device settings.

Security and storage

ShellSSH uses device security features to protect locally stored credentials and keys. Optional cloud-sync content is encrypted on the device before upload. No method of storage or transmission can be guaranteed completely secure. The remote servers you connect to are outside ShellSSH's control.

Retention and deletion

Local app data remains on your device until you remove it or clear the app's data. Account information and optional cloud-sync data may remain with the ShellSSH service while your account is active. To request deletion of your account and associated cloud data, email support@shellssh.com from the address associated with your account. We may need to verify that the request is yours and will explain any information that must be retained for legal or security reasons.

This website

This public website does not include app analytics scripts, advertising scripts, or a contact form. If it is hosted on GitHub Pages, GitHub may process technical information such as your IP address when serving the page under GitHub's privacy statement.

Changes and contact

We may update this policy as ShellSSH changes. The date above shows when this page was last revised. For privacy questions or deletion requests, contact support@shellssh.com.