01The short version
We don't sell your data. We don't run ad trackers. We don't train external models on anything you give us. Your SSH keys never leave your device, Termite works without an account, and sync is end-to-end encrypted under keys only your devices hold.
The rest of this page is the detail behind that promise. App-specific details for Termite live in the Termite privacy notice. If you'd rather just ask a person, write to developer@sentrylinelabs.com.
02What we collect
We try to collect as little as we can get away with. In practice, that's:
- Account data. Termite works fully without signing in. If you choose to create an account, we keep your email address so we can give you one and reach you.
- Synced data. If you turn on sync, your hosts, snippets, tunnels and settings are stored so they reach your other devices. They're end-to-end encrypted before they leave your device, so we never see a hostname or a key.
- Notification tokens. A push token for each device, so we can tell you when a command finishes or an agent is waiting. Your SSH credentials never touch the push pipeline.
- Billing data. Handled by the app store or our payment processor. We see a plan and a status; we never store card numbers.
- Operational logs. Minimal, short-lived diagnostics (error traces, request timing) to keep the service healthy.
Private keys and passwords live in your device's secure storage and are never sent to us.
03How we use it
We use the data above only to run the service: to sync your encrypted settings, deliver notifications, process payments, respond to support requests, and keep the system reliable and secure. That's the whole list.
We do not build advertising profiles, and we do not sell or rent personal data to anyone.
04Legal basis
If you're in the EEA or UK, we process your data on these bases: contract (to provide the service you signed up for), legitimate interests (to keep the service secure and improve it), and consent where required, such as notifications or optional communications.
06Retention
We keep your data for as long as your account or sync is active. When you delete your account or turn off sync, we remove your data from our live systems promptly and from backups within 30 days. Operational logs are kept for a short window and then discarded. We retain billing records only as long as tax and accounting law requires.
07Your rights
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct data that's wrong or out of date.
- Export your data in a portable format.
- Delete your account and associated data.
- Object to or restrict certain processing.
To exercise any of these, write to us. We'll verify your request and respond within 30 days.
08Security
We encrypt data in transit and at rest, scope access tightly, and design for local-first storage so less of your data ever has to leave your device. Keys sit behind biometrics, and lock-screen approvals travel over your own SSH connection. No system is perfectly secure, but we treat your data the way we'd want ours treated, and we'll notify affected users promptly in the unlikely event of a breach.
10Children
The service isn't directed at children under 16, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll delete it.
11Changes
We'll update this policy as the service evolves. Material changes update the effective date above, and account holders are notified by email for significant ones. The current version always lives at this URL.
12Contact
Questions about your privacy, or want to make a request? Reach us directly.