Privacy Policy

Information We Do Not Collect

FlowShell is designed with privacy as a core principle. We do not collect, store, or transmit:

• Your name, email address, or any personal contact information
• Your SSH credentials, passwords, or private keys outside of your device
• The content of your terminal sessions
• The content of files you access via SFTP
• Your server hostnames, IP addresses, or connection details to our servers

Information Stored on Your Device

The following data is stored locally on your device and is never transmitted to us:

• SSH connection profiles — hostnames, usernames, ports, and connection settings you configure
• SSH private keys — generated or imported keys are encrypted at rest using the iOS Secure Enclave and stored only on your device
• Snippets and preferences — your saved command snippets, terminal themes, and app settings
• Widget configurations — server monitoring commands configured for Home Screen widgets

Information We Collect

Analytics Data

We use Firebase Analytics to collect anonymous usage data to help us improve the App. This includes:

• Screen views (which screens are visited)
• Feature usage events (e.g., "connection established", "key generated")
• App performance and crash reports

This data is:

• Anonymous — it is not linked to your identity, name, email, or Apple ID
• Aggregated — we only view trends across all users, not individual behavior
• Not shared with third parties for advertising or marketing purposes
• Not used for tracking — we do not link this data with data from other apps or websites

Firebase Analytics uses an anonymous app-instance identifier. We do not collect or access Apple's Advertising Identifier (IDFA).

Purchase Information

If you subscribe to FlowShell Pro, Apple processes and manages your subscription. We receive only a confirmation of your subscription status through Apple's StoreKit framework to unlock premium features. We do not receive or store your payment details.

Push Notifications

If you enable push notifications, we use Firebase Cloud Messaging to deliver them. This requires an anonymous device token managed by Apple. We do not associate this token with your identity.

How Your Data Is Protected

• SSH private keys are encrypted using the iOS Secure Enclave before storage
• All SSH, Mosh, and SFTP connections are encrypted end-to-end between your device and your server using industry-standard protocols (AES, ChaCha20, Ed25519)
• No server-side storage — FlowShell does not operate any servers that store your data. All connection data stays on your device
• Biometric lock — you can optionally protect the App with Face ID or Touch ID

Third-Party Services

FlowShell uses the following third-party services:

We do not use any advertising SDKs, data brokers, or tracking services.

Children's Privacy

FlowShell is not directed at children under the age of 13. We do not knowingly collect any personal information from children.

Your Rights

Since we do not collect personal information linked to your identity, there is typically no personal data for us to provide, modify, or delete. However, you can:

• Delete all local data by uninstalling the App
• Opt out of analytics by disabling analytics in your device's iOS Settings under Privacy & Security
• Manage your subscription through iOS Settings → Subscriptions
• Revoke push notification permissions through iOS Settings → Notifications

Data Retention

Anonymous analytics data is retained by Firebase for up to 14 months, after which it is automatically deleted. No personally identifiable data is retained by us at any time.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last Updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

[email protected]