Privacy Policy
How CodeSSH handles information when you use the CodeSSH app for iPhone and iPad and the codessh.com website.
1About this policy
CodeSSH (“CodeSSH”, “we”, “us”) develops the CodeSSH application for iPhone and iPad (the “App”) and operates the website at codessh.com (the “Website”). This policy explains what information is processed when you use them, for what purpose, and the choices available to you.
“Personal data” means information that identifies you or could reasonably be linked to you. For the limited personal data described in section 7, CodeSSH is the data controller.
2Information we collect
The App does not collect personal data. It contains no analytics, telemetry, crash-reporting or advertising code, and it does not assign you an identifier. We cannot see who uses the App, how it is used, or what you create with it.
The table below follows the categories Apple uses for App Store privacy labels. The App’s listing carries the label Data Not Collected, which reflects it.
| Category | Status |
|---|---|
| Contact informationName, email address, phone number | Not collected |
| IdentifiersUser ID, device ID, advertising identifier | Not collected |
| Usage dataProduct interaction, feature use | Not collected |
| DiagnosticsCrash data, performance data | Not collected |
| User contentCode, files, messages, issues | Not collected |
| Location | Not collected |
| Financial information | Not collected |
| Browsing and search history | Not collected |
3Information stored on your device
Everything you create in the App is stored locally and protected by iOS data protection. None of it is transmitted to us.
- Projects and files are kept in the App’s own storage, in iCloud Drive, or in a folder you have given the App access to.
- App data, including settings, themes, search indexes, local file history, issues and assistant conversations, is kept in the App’s storage.
- Spotlight indexes the open project’s files and issues on your device. The index is managed by iOS.
- Siri and Shortcuts actions provided by the App run on your device.
You can delete this information at any time from within the App, or by deleting the App.
4Credentials and security
- Passwords, tokens and API keys are stored in the iOS Keychain and are never written to a settings file. Git credentials can be read only on your device, and only while it is unlocked.
- SSH keys generated in the App are created in the Secure Enclave. The private key cannot be exported, by you or by us.
- Host keys are recorded on first connection. If a server’s key later changes, the App will not reconnect until you confirm.
- App lock. You can require Face ID or Touch ID whenever the App returns from the background.
- Encrypted vault. You can export connections and their secrets as a single file protected by a passphrase you choose. We never receive this file or the passphrase.
- Backups, including automatic snapshots, are kept on your device or in a location you choose, such as iCloud Drive or a USB drive. API keys are never included.
iOS may keep Keychain items after an app is deleted. To remove stored credentials completely, delete them in the App before uninstalling it.
5Services you connect
The App communicates only with services you configure or actively use. These connections are made directly from your device. They do not pass through any server operated by us, and we have no access to their content. Each provider’s own privacy policy governs the information it receives.
| Service | When the App connects | What is sent |
|---|---|---|
| Git hostsGitHub, GitLab, Bitbucket and other remotes | When you clone, fetch or push, or use pull requests and issues | Repository data and the credentials you provide |
| Your serversSSH, SFTP, WebDAV, Telnet | When you open a connection or transfer files | Commands, files and credentials for that host |
| AI providersExternal endpoints you add | When you send a request with an external model selected | Your prompt and the files, selections or diffs you choose to include |
| Hugging Facehuggingface.co | When you browse or download on-device models | Search terms and download requests, with your IP address |
| A content delivery network | When a Markdown preview contains Mermaid diagrams or KaTeX math | A request for those rendering libraries, with your IP address |
| Apple iCloud Drive | If you keep projects or backups in iCloud Drive | Those files, synchronised by Apple under your Apple Account |
| Devices on your network | Only if you turn on Serve on Local Network for a web preview; off by default | The preview you are serving |
On-device models run entirely on your device and send nothing. For external AI providers, an in-app inspector shows each request exactly as it was sent.
6Purchases
The App is sold through the App Store. Apple processes your payment and manages any free trial. We do not receive your name, email address or payment details.
Your purchase is confirmed on your device through the App Store, and no purchase information is sent to us. Apple provides developers with aggregated sales reports that do not identify individual customers. Receipts and refunds are handled by Apple under Apple’s privacy policy.
7Support requests
The App never sends crash reports or diagnostics on its own. If you need help, you can export a diagnostics report from Settings › About › Export Diagnostics and choose to send it to us. The report describes the App’s technical state — launch, memory, runtime, background, storage and self-test information — and excludes host names, file paths, project names, credentials and file contents.
When you email us, we receive your email address, any name you include, and the contents of your message and attachments. We use this information only to respond to you, on the basis of our legitimate interest in answering your enquiry. We keep the correspondence until your request is resolved and for twelve months afterwards, then delete it.
8The Website
The Website is a static site. It does not use cookies, analytics, advertising or tracking technologies, and it does not ask for personal information.
To display the site, your browser requests a small number of resources from third parties, which receive your IP address and standard browser information as part of each request:
- Fonts from Google Fonts, at
fonts.googleapis.comandfonts.gstatic.com. - The App Store badge from Apple, at
tools.applemediaservices.com.
As with any website, the server that delivers codessh.com receives standard request information, such as your IP address and the page requested, in order to deliver it.
9Your rights
Depending on where you live, you may have rights over your personal data under laws including the EU and UK General Data Protection Regulation and the California Consumer Privacy Act. These include the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive a copy in a portable format.
Because the App does not collect personal data, the only information we are likely to hold about you is support correspondence. To make a request, email contact@codessh.com. We will respond within thirty days and will not charge a fee.
We do not sell or share personal information, and we do not use it for targeted advertising. You also have the right to lodge a complaint with your local data protection authority.
10Contact
For questions about this policy or about your data, email contact@codessh.com.