In short
- Your data stays with you
- Hosts, SSH keys, saved passwords, known hosts and settings are stored on your device, encrypted. We never receive them and have no way to read them.
- One automatic request
- About once a day, Termit asks GitHub whether a new version exists. The request says nothing about you or your device, and you can switch it off.
- Everything else only when you say so
- Error reports and problem reports are sent only after you have seen exactly what they contain and pressed Send, or chosen to send them automatically.
- No tracking
- No analytics, no advertising, no profiling, and nothing sold or shared for marketing. Not in the app and not on this website.
Who we are
Termit is made by ProCreative, the controller of the personal data described here. For anything about this policy or your data, write to privacy@termit.app.
What stays on your device
Everything you put into Termit is kept on the device where you entered it, and is never sent to us:
- saved hosts, with their names, addresses, usernames, groups and tags
- SSH private keys and their passphrases, and saved passwords
- known hosts (the server keys you have accepted)
- settings, themes and keyboard shortcuts
These are encrypted with AES-256-GCM under a key held by your operating system's keystore (Windows DPAPI, Apple Keychain, Android Keystore or the Linux Secret Service). If you turn on the app lock, Face ID, Touch ID, fingerprint and Windows Hello are handled by your operating system: Termit is only told whether you passed, and never sees biometric data.
What you type in a terminal and what it shows (including scrollback) stays in the app's memory and is not stored or sent by Termit. Backups are password-protected files that you create and keep yourself; they go wherever you save them, not to us.
Beta builds keep a diagnostic log on the device for 7 days. It can include the
user@host of your connections and error messages, but never passwords,
key material or terminal content, and it is not sent anywhere. Release builds keep
no log file.
The connections you make
When you connect to a server, Termit connects to it directly. We are not in the middle and do not relay, see or record your sessions. The server you connect to and its operator receive what any SSH client sends them, such as your IP address, username and the credentials you choose to use, under their own policies.
The update check
Beta and release builds check for a new version about once a day. Termit downloads
the public list of releases and a signed release description from GitHub, then
compares versions on your device. The request carries a fixed
User-Agent: Termit and no version number, identifier, query string or
cookie.
Like any website, GitHub sees the IP address the request comes from and that a Termit app asked. GitHub, Inc. handles this under the GitHub General Privacy Statement. We do not receive this information. When you choose to download an update, it also comes from GitHub.
We rely on our legitimate interest in letting you know about fixes, including security fixes. You can turn this off at any time with Check for updates in Settings › About. Once it is off, no request is made.
Error reports
When something goes wrong inside Termit, the app can note the error on your device so you can choose to share it with us. You choose how this works in Settings › About › Error reports:
- Ask me (the default): errors are collected on your device. At most every two hours, Termit offers them to you. You see the exact text of each one, untick any you want to keep back, and send only if you press Send.
- Send automatically: errors are sent without asking, scrubbed the same way.
- Never: nothing is collected.
What a report contains
The type of error, its message and where in Termit's code it happened, with the app version and build, and basic facts about the system: operating system and version, processor type, and language and time zone settings.
Before a report is even stored on your device, Termit removes identifying details:
the names, addresses, usernames, groups and tags of your hosts, the names of your
keys and known hosts, user@host patterns, IP addresses, domain names,
home folder paths, WSL distribution names, and key fingerprints.
Never sent: terminal content or scrollback, the clipboard, passwords, keys, environment variables, your settings, screenshots, and your computer's name. Termit includes no native crash reporter, so memory dumps are never taken.
Where reports go
Reports go to Sentry (Functional Software, Inc.), which processes them for us as a processor and stores them in its EU data region in Frankfurt, Germany. We use them only to find and fix bugs. They are deleted automatically after at most 90 days. Your IP address is part of the connection, but Termit does not ask Sentry to store it with the report.
The legal basis is your consent, given each time you press Send or once when you choose Send automatically. You can withdraw it at any time by choosing Never or Ask me.
Reporting a problem
Settings › About › Report a problem sends us the message you write, scrubbed like an error report. You can also give an email address if you want a reply, and tick Attach recent errors to include the errors held on your device. The email address is sent exactly as you typed it.
Problem reports go to Sentry in the EU, like error reports, and are deleted after at most 90 days. We use your email address only to reply about your report. The legal basis is your consent, given by sending the report.
Feature ideas
Suggest a feature and Vote on ideas, when a build offers them, open a public GitHub Discussions page in your browser. Termit sends nothing itself. What you post there is public and is handled by GitHub under its own privacy statement.
Device permissions
Termit asks only for what it needs to work:
| Permission | Why |
|---|---|
| Network access | To connect to your servers and to check for updates. |
| Biometrics (Face ID, fingerprint, Windows Hello) | Only if you turn on the app lock. Your operating system checks you; Termit gets a yes or no. |
| Notifications and a foreground service (Android) | To keep your sessions connected while Termit is in the background, and to show that they are running. |
| Local network (iOS, macOS) | To reach servers on your own network. |
Termit does not use your location, contacts, camera, microphone or photos.
App stores
If you get Termit from the Microsoft Store, Google Play or the App Store, the store handles your purchase, download and its own usage statistics under its own privacy policy. Stores may share anonymous statistics with us, such as install counts and crash rates. These do not identify you.
This website
termit.app uses no cookies, analytics or third-party trackers, and loads nothing from other sites. If you pick a light or dark theme, that choice is saved in your own browser (local storage) and never sent to us. The server that hosts the site may keep standard access logs (IP address, page and time) for a short time, for security and to keep the site running.
Your rights
Under the GDPR and similar laws, you have the right to access the personal data we hold about you, and to have it corrected or deleted. You can also restrict or object to its use, receive a copy of it, and withdraw consent at any time. Withdrawing consent does not affect what was sent before. Write to privacy@termit.app.
Because reports carry no account or name, we may only be able to find yours if you tell us the email address you gave, or roughly when you sent it. You also have the right to complain to the data protection authority in the country where you live or work.
Children
Termit is a tool for working with computers and servers. It is not directed at children under 16, and we do not knowingly collect their data.
Changes to this policy
When Termit starts handling data in a new way, this page will be updated first, with a new date at the top. That includes the paid edition, before purchases open. Significant changes will also be noted in the release notes.