sukhomlinovSSH UI - privacy policy
Effective 22 August 2026 · app package com.sukhomlinov.sshui
· developer Vadim Sukhomlinov
SSH UI is an SSH client and tmux-friendly terminal. It connects your device to SSH servers that you configure. It has no accounts, no sign-up, no advertising, no analytics or tracking SDKs, and the developer operates no servers. The app does not collect, transmit, sell, or share any personal data with the developer or with any third party.
On this page
Data the app stores - on your device only
All of the following stays in the app's private storage on your device and is never sent anywhere except, where noted, to SSH servers you yourself configure:
- Host profiles - hostnames, ports, usernames, per-host settings, and pinned server host-key fingerprints that you enter to define connections.
- SSH keys - private keys are generated inside the Android KeyStore (hardware-backed where the device supports it). They are marked non-exportable: the app itself cannot read the private key material, and neither can the developer. Public keys, user certificates, and enrolled FIDO2 security-key identities (key handles, never the key's secrets) are stored in app-private storage.
- App settings - font, key rows, and similar preferences.
- Session content - terminal scrollback and files you view or edit are held in memory or app-private cache while you work.
Android device backup of this data is disabled (allowBackup="false"), so none of it
is copied into cloud backups.
Where the app sends data
The app opens network connections only to the SSH servers (and jump hosts) that you configure, over the SSH protocol, which encrypts all traffic in transit. What you type, files you transfer, forwarded ports, and anything you share into the app via Android's share sheet go to the server you selected - and nowhere else. The developer cannot see, intercept, or receive any of it.
Permissions the app requests and why
- Internet / network state
- To reach your SSH servers and to notice network changes for reconnecting.
- Biometrics
- Optional, to gate use of your hardware-backed SSH key behind fingerprint or face unlock. Biometric data itself never reaches the app; Android only reports success or failure.
- Notifications / foreground service
- To keep connections alive in the background and to notify about terminal activity you asked to watch.
- Vibration
- The terminal bell.
- USB (optional feature)
- To talk to FIDO2 security keys you plug in, and to share a USB device with a host when you switch that on.
The app requests no access to your location, contacts, camera, microphone, call logs, SMS, or files outside what you explicitly open or share into it.
Clipboard
A remote application can place text on your clipboard through the standard terminal escape sequence (OSC 52) - this is a normal terminal feature under your control. A remote request to read your clipboard is always shown to you and requires your explicit approval, every time.
Data retention and deletion
Everything the app stores lives on your device. Deleting a host profile removes it immediately. Uninstalling the app removes all app data, including the keys held in the Android KeyStore. Because the developer holds no copy of any of your data, there is nothing further to request deletion of.
Crash diagnostics
The app contains no crash-reporting SDK. If the app crashes, Google Play may report aggregate crash and ANR diagnostics to the developer through standard Google Play Console mechanisms, subject to your device's Android settings and Google's own privacy policy.
Children
The app is a developer tool, is not directed at children, and does not knowingly collect data from anyone - children included, since it collects no data at all.
Changes to this policy
If a future version of the app changes what data is handled, this policy will be updated at this same URL before that version ships, with the effective date above revised.