Privacy Policy

Last updated April 2026

ShellKey is built to keep SSH access private. We do not require accounts, we do not run a cloud sync service for your connections, and we do not proxy your SSH sessions through our own servers.

1. Information ShellKey stores

ShellKey stores the information needed to provide its core functionality on your device, including:

Saved connection profiles you create, such as server label, host, port, and username.
Credentials you choose to save, such as passwords, private keys, and passphrases, in the iOS Keychain.
Trusted host key fingerprints used for SSH host verification.
App settings and preferences, such as theme, font size, and terminal-related settings.
In-app purchase state provided through Apple StoreKit.

2. Information ShellKey does not collect

No account registration data.
No advertising identifiers.
No third-party analytics or tracking SDKs.
No copies of your terminal session contents on our servers.
No cloud-hosted database of your saved servers or credentials operated by us.

3. How network traffic works

ShellKey connects directly from your device to the servers you choose over SSH. Your SSH traffic is sent to those remote servers to provide the app's core functionality. We do not relay those SSH sessions through ShellKey-operated servers.

If you use features like host key verification, key-based authentication, or port forwarding, that data is handled on-device as part of the direct SSH connection.

4. In-app purchases

ShellKey offers in-app purchases through Apple StoreKit. Payment processing is handled by Apple. We do not receive your full payment card or billing details. Apple may provide us with limited transaction information needed to determine purchase status and unlock paid features.

5. App permissions

Local Network Access

ShellKey may request Local Network access so it can discover or connect to devices on your network when needed for SSH-related workflows. You can revoke this permission at any time in iOS Settings.

6. Data storage and retention

ShellKey is primarily a local-first app. Saved profiles, settings, trusted host fingerprints, and similar app data are stored on your device.

Credentials saved in the iOS Keychain are protected by Apple's security model. Because Keychain behavior is controlled by iOS, deleting the app should not be relied on as the only method of removing saved credentials. If you want to remove saved SSH credentials, delete the relevant saved connections or contact us if you need help understanding what is stored.

7. Your choices

You can choose whether to save connection details and credentials.
You can delete saved server profiles from within the app.
You can revoke app permissions through iOS Settings.
You can contact us if you have privacy questions or requests.

8. Children's privacy

ShellKey is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date on this page and may provide additional notice in the app or on our website when appropriate.

10. Contact

If you have privacy questions, contact support@shellkey.app.