Privacy Policy

Scope & data collection

This policy covers the Termforge iPhone app and its website. The operator above is responsible for personal information received through support and website operation.

Termforge does not collect or store your app data on developer-operated servers. It has no Termforge account, developer backend, analytics, advertising, tracking, cloud sync, or remote diagnostic uploader. We do not sell your personal information or use it for advertising.

Your app data stays on your device, except when you choose to connect to a remote server, transfer or share files, use Apple services, or contact support. Website requests and support emails are described separately below.

Local app data

Saved servers, hostnames, ports, usernames, connection preferences, known-host fingerprints, workspaces, settings, snippets, public-key metadata, and connection-history metadata are stored locally. Connection history contains session times and outcomes; the app does not persist terminal transcripts or command history. Active terminal output is held temporarily in memory.

App-private data uses iOS file protection and is marked as excluded from backup. Termforge does not offer iCloud sync. User-selected Files destinations and their backup or synchronization settings are separate from the app.

Credentials & authentication

Private SSH keys are protected by app-scoped, device-only, nonsynchronizing iOS Keychain storage. Protected key use requires device authentication. SSH passwords and imported-key passphrases are requested through native prompts for authentication and are not saved. Imported encrypted keys retain their encrypted representation.

Credentials are used to authenticate to your chosen server over SSH. Password authentication sends the password within the encrypted SSH connection; public-key authentication proves possession of the private key. We do not receive your passwords, private keys, passphrases, or server credentials.

Your remote servers

SSH/SFTP connections go to the hosts and ports you select. Those hosts and relevant network providers receive connection information, including your network address. Your chosen server receives authentication exchanges, commands, file operations, and uploaded file contents.

Those servers operate under their owners’ policies. We do not operate or control them. Disconnecting, deleting a saved server, or removing Termforge does not erase remote logs, reverse commands, or remove transferred files.

Files, exports & clipboard

Import, upload, download, editing, export, clipboard, and sharing actions process the content you select. Temporary copies are created for file operations and cleaned up after completion, cancellation, or recovery from interrupted operations.

Configuration exports exclude credential fields, key references, and trusted-host records. Your own snippets or other text may still contain secrets; review exports before sharing. Files saved, copied, or shared outside the app are handled by the destination you choose and must be deleted there separately.

Apple purchases & diagnostics

Apple handles App Store distribution, payments, and refunds. Termforge uses verified StoreKit purchase and entitlement information on your device to determine trial or lifetime access and restore purchases. We do not receive your payment-card details or Apple Account credentials, and no developer licensing server receives purchase records.

A device-only Keychain timestamp is used to detect device-clock rollback; it does not identify your Apple Account. Local application diagnostics use restricted event/error codes and operational counts or timings, rather than credentials, terminal output, or file contents. Termforge does not upload them to us.

Apple may process purchases and system diagnostics under your Apple settings and Apple’s privacy policy. These are separate from Termforge’s app-data practices.

Email support

If you email [email protected], we receive your email address and the message or attachments you choose to send. This is voluntary and is not required to use the app. Do not send passwords, private keys, payment details, or unredacted terminal content.

We use correspondence to respond to requests, investigate reported issues, and meet applicable obligations. Access is limited to the operator and the email provider used to deliver and store messages. Support email is handled through Gmail, subject to Google’s privacy policy.

Support records are kept only as long as needed to resolve the request, handle related follow-up or disputes, and meet legal retention obligations. You may request their deletion at the address above; records that must be retained by law or for a necessary legal claim may be retained for that purpose.

Website & hosting

This static website uses no application analytics, advertising, tracking scripts, contact forms, or site-set cookies. Images and video are served locally. External links open services with their own privacy practices.

The configured website delivery uses Cloudflare and a web server. Serving and securing requests requires processing technical information such as IP addresses, requested URLs, timestamps, browser information, and errors. The website server disables routine access logging; error logs and infrastructure security logs may contain request details. This information is used to operate, protect, and troubleshoot the site, rather than build advertising profiles.

Cloudflare’s processing is described in its privacy policy. Hosting and email services may process information outside your country, including outside the European Economic Area, under their applicable transfer safeguards. Infrastructure records are subject to service settings and provider retention policies; contact us with questions about a particular request.

Deletion & your rights

Delete saved app information through the app’s relevant controls or remove app data from your device. Uninstalling may leave iOS Keychain items; deleting keys in the app before uninstalling removes their associated credentials. Remote files, exported copies, backups, and Apple’s purchase history must be managed separately. We cannot retrieve your local credentials or delete data on a server you operate.

Where applicable, support processing is necessary to respond to your request and provide support; service-security and issue-handling records are processed for our legitimate interests in operating a reliable service. Records required by law are processed to meet that obligation.

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of personal information we hold, and object to processing based on legitimate interests. Email the contact above. You may also complain to your local data-protection authority, including Spain’s Agencia Española de Protección de Datos. These rights do not give us access to app data that exists only on your device.

Updates & contact

We will update this policy when our practices change and show the revised effective date here. Material changes will be explained through the website or app, with any consent required by law obtained before the relevant processing.

For privacy questions or requests, email [email protected] or write to the operator at the address above.