# Privacy Policy — Pocket SSH
**Last updated: 11 July 2026**
Pocket SSH ("the App", "we", "us") is an SSH/terminal client for Android developed by
Anh Dao. This Privacy Policy explains what information the App handles and how. By using
the App you agree to this policy.
**Summary:** Pocket SSH is a local-first client. Your servers, credentials, and keys are
stored **only on your device**. We do **not** operate any server that receives your data,
and we never transmit your SSH credentials, private keys, or session content to us or to
any third party.
---
## 1. Information stored on your device
To function as an SSH client, the App stores the following **locally on your device only**:
- **Host configurations** — hostnames/IP addresses, ports, usernames, labels, groups, and
connection settings you enter.
- **Credentials and private keys** — passwords, SSH private keys, passphrases, and keychain
entries you choose to save. These are stored in the Android Keystore–backed secure storage
(`flutter_secure_storage`) in encrypted form.
- **Known-host fingerprints** — SSH host-key fingerprints (`known_hosts`) used to verify the
identity of servers you connect to.
- **App preferences** — theme, terminal appearance, snippets, command history, and other
settings.
This information never leaves your device except as a direct SSH/SFTP/Telnet/Mosh connection
**to the servers you yourself configure**. We have no access to it.
## 2. Network connections
The App only makes outbound network connections to:
- **The remote servers you configure and choose to connect to** (SSH, SFTP, Telnet, Mosh,
or serial). This traffic goes directly from your device to your server; it does not pass
through us.
- **Local network discovery** — when you use the "Discover Devices" feature, the App reads
your Wi‑Fi network information (via `network_info_plus`) to scan your local network. This
happens on-device and results are not transmitted anywhere.
## 3. Purchases
The App offers an optional **Pocket SSH Pro** subscription. Purchases are processed by
**Google Play Billing**. We do not receive or store your payment card details — Google
handles all payment processing. The App only receives a purchase/entitlement token from
Google to unlock Pro features.
## 4. Advertising and third-party SDKs
The App includes the **Google Mobile Ads (AdMob)** SDK. When advertising is enabled, Google
may collect a device advertising identifier and related device information to serve and
measure ads, as described in Google's Privacy Policy. See:
- Google Privacy Policy: https://policies.google.com/privacy
- How Google uses information from apps that use its services:
https://policies.google.com/technologies/partner-sites
The App does **not** use any analytics or tracking SDK beyond the above.
## 5. Permissions we request
- **Internet / network state** — required to open SSH and other connections.
- **Foreground service** — to keep active terminal/tunnel sessions alive while the app is in
the background.
- **Notifications** — to show active-session and connection notifications.
- **Wi‑Fi state / multicast** — for optional local network device discovery.
- **Biometrics** (via device biometric prompt) — optional app lock using your fingerprint/face;
biometric data is handled by the Android system and is never accessed or stored by the App.
## 6. Data sharing and sale
We do **not** sell your personal data. We do **not** share your host data, credentials,
keys, or session content with any third party. The only third-party data flows are the
Google services described in Sections 3 and 4.
## 7. Data security
Credentials and private keys are stored using Android Keystore–backed encrypted storage.
The App additionally offers optional PIN and biometric app locks and a screenshot/recording
protection option for credential and terminal screens. No method of storage is 100% secure,
but we design the App to keep your secrets on-device and encrypted.
## 8. Data retention and deletion
All App data lives on your device. You can delete any host, credential, or key from within
the App at any time, and you can remove **all** App data by uninstalling the App or clearing
its storage in Android Settings. Because we hold no copy of your data, there is nothing for
us to delete on our side.
## 9. Children
The App is intended for developers and IT professionals and is not directed at children
under 13. We do not knowingly collect data from children.
## 10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating
the "Last updated" date above and, where appropriate, within the App or its store listing.
## 11. Contact
If you have questions about this Privacy Policy, contact us at:
**Email:** daoduyanh08021988@gmail.com