**Hop** is an SSH client for iPadOS and iOS developed by PJASoft. We designed Hop to be private by default: your data stays on your device, and we (the developer) do not collect, receive, or have access to any of it. The only exceptions are ones you initiate: SSH connections to your servers, a small purchase‑status flag synced with your iCloud, and backups you export.
### Data we collect
**None.** Hop has no analytics, no tracking, no advertising, and no developer-operated backend. We do not collect personal information, usage data, or device identifiers.
### Data stored on your device
Everything you create in Hop is stored **locally on your device only**:
- **Server profiles** (name, host, port, username, group) are saved in the app's local storage (`UserDefaults`).
- **Command snippets** and **preferences** (theme, font, font size) are saved in the app's local storage (`UserDefaults`).
- **Credentials** — passwords, SSH private keys, and passphrases (including keys you generate on‑device) — are stored in the device **Keychain**, the operating system's encrypted credential store.
This data never leaves your device through Hop, is never sent to us, and is not shared with any third party. It is removed when you delete the corresponding item in the app or uninstall Hop. If you use iCloud Keychain or encrypted device backups, this data may be included in those backups, which are governed by Apple's privacy policy.
### Network connections
Hop connects **only to the SSH servers you explicitly configure**, using the credentials you provide, to establish your SSH sessions. These are direct connections between your device and your servers. Hop does not route your traffic through any intermediary or developer-operated server.
### In‑App Purchases
Hop offers an optional one‑time purchase (**Hop Pro**). Payment is processed by Apple through the App Store via StoreKit. We do not receive or store your payment details or any personal information; Apple only provides us with aggregate, anonymous sales reports. Purchase validation happens on your device and with Apple's servers.
### iCloud
So your Hop Pro status follows you when you reinstall the app or switch devices, Hop stores a single flag (whether Pro is unlocked) in Apple's iCloud key‑value storage, tied to your Apple ID. This flag contains no personal information, no credentials, and no server data — only the purchase state. Its syncing is governed by Apple's privacy policy.
### Backups you export
You can export a backup of your setup (servers, identities, snippets) and credentials. The file is **encrypted with a passphrase you choose** and is shared only where you send it (Files, AirDrop, etc.). We never receive it. Keep the passphrase safe — without it the backup cannot be restored.
### Third parties
Hop does not integrate any third-party analytics, advertising, or tracking SDKs.
### Children
Hop is not directed to children and does not knowingly collect any information from anyone, including children.
### Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with a new "Last updated" date.
### Contact
Questions about this policy? Contact: **juan.frausto@pjasoft.com**