← Back to SSHoo

Privacy Policy

Effective Date: October 17, 2026

SSHoo is designed with privacy as a core principle. This Privacy Policy explains how SSHoo ("we", "our", or "the app") collects, stores, uses, and safeguards information when you use our Android SSH client application.

Information We Collect

SSHoo collects the minimum information needed to provide SSH, terminal, tunneling, AI chat, and SSHoo Pro features. Most information is stored locally on your device and is never transmitted to our servers unless explicitly stated below.

  • Connection data: SSH host addresses, ports, usernames, jump hosts, and connection preferences you configure
  • Authentication material: SSH passwords, private keys, and key passphrases you choose to save locally
  • Host fingerprints: SSH server fingerprints for known host verification
  • Session data: Terminal tabs, optional terminal session recordings, saved commands, aliases, and autocomplete data
  • Tunnel configurations: Port forwarding settings and related connection metadata
  • App preferences: Theme, font, SSH defaults, AI agent selection, analytics preference, and behavior settings
  • Optional Tailscale data: Your Tailscale API key if you enable Tailscale device discovery
  • Purchase data: If you buy SSHoo Pro (a one-time purchase, not a subscription), your Google Play purchase token, product ID, and purchase time, and whether the purchase is valid, used only to validate the purchase and keep Pro unlocked
  • Free trial: If you start the SSHoo Pro free trial, the date and time you started it, the latest time the app saw during the trial (so turning the clock back can't extend it), and whether it has ended, stored in your app preferences
  • Free-trial device record: A one-way SHA-256 hash of your device's Android ID combined with SSHoo's package name, sent to our Appwrite backend so that clearing app data or reinstalling cannot restart the trial. The Android ID itself never leaves your device. When you start the trial, the backend stores the hash with the trial's start time and the anonymous user ID of your install. The app also sends the hash once each time it starts, to check whether this device has already used the trial; if it has not, nothing is stored
  • Pro status check: Every install, including installs that never buy SSHoo Pro, creates an anonymous session with our Appwrite backend and uses it to look up the install's SSHoo Pro purchase entitlement when the app comes to the foreground. The lookup sends the anonymous session and user ID generated for your install, not your name, email address, or Google account. Our backend may log standard request metadata, such as your IP address
  • Voice input (optional): If you use voice input, your speech is transcribed entirely on your device using Android's on-device speech recognition. Audio is not recorded, stored, or sent off your device by SSHoo, and is not transmitted to any third party
  • Usage, crash, and performance data: Basic usage analytics, crash reports, and performance metrics. These are enabled by default and can be turned off at any time in app settings

We do not collect terminal output, file contents transferred through SFTP, SSH credentials stored on your device, or data from your remote servers.

Data Storage

All sensitive data is stored locally on your device. SSHoo does not operate a cloud sync service for your hosts, credentials, terminal sessions, or files.

  • Credentials: SSH passwords, private keys, key passphrases, and Tailscale API keys are encrypted locally using Google Tink authenticated encryption (AES-256-GCM), with the encryption key held in the Android Keystore (hardware-backed where available)
  • Local app data: Hosts, known hosts, tunnels, commands, aliases, sessions, recordings, and preferences are stored in local app storage; sensitive preferences use encrypted DataStore
  • Private keys: Private keys remain on your device and are never transmitted to our servers
  • Session recordings: Optional terminal recordings are stored in local encrypted storage and can be deleted at any time
  • Purchase record: If you buy SSHoo Pro, the app keeps a record of your purchase token, product ID, and purchase time on your device, encrypted the same way as your credentials, so that Pro keeps working offline. The record itself never leaves your device: it is excluded from Android cloud backups and device transfers, and it is removed when you clear SSHoo's storage or uninstall the app. Removing it does not remove your purchase, which stays with your Google account and is restored from Google Play
  • Free trial: The date you started the SSHoo Pro free trial, the latest time the app saw during it, and whether it has ended are stored with your other app preferences. Unlike the purchase record, app preferences can be included in your Android backup, so restoring a backup keeps the trial marked as used. Clearing SSHoo's storage or uninstalling the app removes them from your device, but not the free-trial device record held by our backend, which keeps the trial marked as used on this device
  • Backups: Stored credentials and the purchase record are excluded from Android cloud backups and device transfers to reduce exposure
  • External transmission: Data is sent outside the device only for analytics and crash/performance reporting (on by default, can be disabled), the anonymous Pro status check every install makes, the free-trial device check, purchase validation, direct Tailscale API use, Google Play Billing, Claude sign-in if you use it, or AI services you choose to use

You can delete stored credentials and local records from within SSHoo, by clearing app data in Android settings, or by uninstalling the app.

Voice Features

SSHoo offers optional voice input and spoken responses. Both run entirely on your device:

  • Voice input: Speech is transcribed using Android's on-device speech recognition. Your audio is processed locally and is not sent to Google or any other third party. If your device does not have an on-device speech model available, voice input is shown as unavailable rather than falling back to a cloud service
  • Spoken responses: Text-to-speech is generated on your device using a neural voice model. The voice model files are downloaded over the network from a public software repository (GitHub) and then run locally; your text and audio are never uploaded for synthesis. If an SSHoo Pro free trial ends without a purchase, the downloaded voice model is deleted from your device

Third-Party Services

SSHoo integrates with the following third-party services. Use of these services is subject to their respective privacy policies:

Firebase (Google)

SSHoo uses Firebase services provided by Google. These are enabled by default and can be turned off at any time in the app settings:

  • Firebase Analytics: Collects anonymized usage data (such as screens viewed and features used) to help us improve the app
  • Firebase Crashlytics: Collects crash reports and diagnostic data to help us identify and fix bugs
  • Firebase Performance: Monitors app performance metrics

Analytics, crash reporting, and performance monitoring are on by default. You can disable any of them at any time in the app settings; when a feature is disabled, no further data is sent to the corresponding Firebase service.

Google Play Billing

SSHoo Pro is a one-time purchase made through Google Play Billing, not a subscription. Payment information is handled entirely by Google and we do not have access to your payment card details. The app checks Google Play's signature on your purchase on your device; this check sends nothing anywhere. The free trial needs no payment details.

Pro status and purchase validation (our Appwrite backend)

We use our own Appwrite backend to check SSHoo Pro status and validate SSHoo Pro purchases. Every install, whether or not you ever buy Pro, creates an anonymous session with this backend and, when the app comes to the foreground, looks up the purchase entitlement recorded for that session. The lookup sends the anonymous session and user ID generated for your install, and nothing that identifies you. Like any web server, our backend may log standard request metadata, such as your IP address.

When you make a purchase, and when the app later re-checks it, the app also sends your Google Play purchase token and product ID to this backend, which stores the purchase token, order ID, product ID, and purchase time against the same anonymous identifier. We do not receive or store your name, email address, or Google account, and we have no access to your payment details.

To stop the free trial from being restarted by clearing app data or reinstalling, the app sends this backend a one-way SHA-256 hash of your device's Android ID combined with SSHoo's package name. The Android ID itself never leaves your device, and the hash cannot be turned back into it. The app sends the hash once each time it starts, to check whether this device has already used the trial. When you start the trial, the backend stores the hash, the time the trial started, and the anonymous user ID of your install, and keeps them for as long as it needs to prevent the trial being reused.

Tailscale (Optional)

If you choose to use Tailscale integration, you provide your own Tailscale API key. This key is encrypted locally and used by the app to query the Tailscale API for your device list. The API key is never transmitted to our servers; it remains on your device and communicates directly with Tailscale's API. You can revoke the API key at any time from your Tailscale admin console.

AI Services (Claude, Codex)

SSHoo can integrate with AI assistants such as Claude or Codex running on your remote servers. Chat messages are transmitted over your SSH connection to the remote host, not through our servers. The AI tools on your remote host may in turn send your prompts to their provider (for example Anthropic or OpenAI); that provider's terms and privacy policies apply to those interactions. We do not process or store your AI conversations.

If you choose to sign in to Claude from within SSHoo, the app connects directly to Anthropic (claude.com and platform.claude.com) to complete sign-in and to obtain and refresh access tokens. Those tokens are stored locally on your device.

Data Sharing

We do not sell, trade, or share your personal information with third parties. Your SSH credentials, private keys, terminal sessions, remote server data, and SFTP file contents remain on your device or on the remote hosts you connect to.

Limited data may be sent to third-party services only when needed for the features you use: Firebase for analytics, crash reporting, and performance monitoring (on by default, can be disabled); our Appwrite backend for the anonymous Pro status check every install makes and the free-trial device check; Google Play and our Appwrite backend for purchase validation; Tailscale for optional device discovery; Anthropic if you sign in to Claude in the app; and AI providers reached through your remote host when you use AI chat features.

Data Security

We implement appropriate security measures to protect your data:

  • SSH credentials, API keys, and the purchase record are encrypted at rest using Google Tink authenticated encryption (AES-256-GCM), with keys held in the Android Keystore where available
  • Private keys are encrypted locally and are not accessible to our servers
  • SSH connections use standard SSH encryption protocols
  • Known host fingerprints help verify server identity
  • Stored credentials and the purchase record are excluded from Android cloud backups and device-to-device transfers
  • No data is synced to cloud services without your explicit action

Your Rights

You have control over the information stored by SSHoo:

  • Delete stored hosts, keys, tunnels, sessions, commands, aliases, and recordings at any time
  • Disable analytics, crash reporting, and performance monitoring in app settings
  • Clear all SSHoo app data through Android settings, including the purchase record and the free-trial dates
  • Uninstall the app to remove local app storage from your device
  • Revoke optional Tailscale API keys from your Tailscale admin console
  • Export configuration for backup purposes where the app provides export features
  • Request deletion of the purchase-validation records associated with your purchase, or of your device's free-trial record, by emailing [email protected]

Analytics data collected by Firebase when enabled is subject to Google's data retention policies.

Children's Privacy

SSHoo is not intended for use by children under the age of 13, or the minimum age required to consent to data processing in your jurisdiction. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will update the Effective Date at the top. Continued use of SSHoo after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or our data practices, please contact us by email:

[email protected]