Privacy Policy for SSHBorg
Last updated: September 13, 2026
Overview
SSHBorg ("the app") is an SSH/SFTP client for Android and for iOS (iPhone and iPad). This privacy policy explains what data the app handles, how it is stored, and your rights as a user. It covers both versions; where they differ, the difference is described in its own section.
Data We Collect and Store
SSHBorg stores all data locally on your device only. We do not operate any servers, and no data is ever transmitted to us or any third party.
The following data is stored locally:
- Host configurations — hostname, port, username, and optionally a saved password for SSH servers you add to the app.
- SSH private keys — cryptographic keys you generate or import within the app.
- App preferences — settings such as theme, language, app lock timeout, and display options.
How Data Is Protected
On Android
- SSH private keys and saved passwords can optionally be encrypted using the Android Keystore, a hardware-backed secure storage system provided by your device. When enabled, encrypted data is bound to your device and app installation.
- The app can optionally require biometric authentication (fingerprint, face, or device PIN) before granting access.
- The app prevents screenshots and screen recording via the
FLAG_SECURE flag.
On iOS (iPhone and iPad)
- SSH private keys and saved passwords can optionally be encrypted with AES-256-GCM, using a key kept in the iOS Keychain. The key is bound to your device and cannot be read while the device is locked.
- The app can optionally require Face ID, Touch ID, or your device passcode before granting access, with a configurable timeout.
- iOS does not allow apps to block screenshots. When the app lock is on, the app covers its content as you leave it, so your hosts and sessions do not appear in the app switcher.
Network Connections
SSHBorg connects exclusively to SSH servers that you explicitly configure. The app makes no connections to any external services, analytics platforms, advertising networks, or our own servers.
All network traffic is SSH protocol traffic between your device and your own servers.
Data Sharing
We do not share, sell, or transmit your data to any third party. Ever.
Permissions
On Android
The app requests the following Android permissions:
- INTERNET — required to establish SSH/SFTP connections to your servers.
- USE_BIOMETRIC / USE_FINGERPRINT — optional, used only if you enable biometric lock.
- FOREGROUND_SERVICE — used to show a persistent notification while SSH sessions are active.
On iOS (iPhone and iPad)
iOS may ask for your permission in these cases:
- Face ID — optional, used only if you enable the app lock.
- Local network — iOS may ask the first time you connect to a server on your local network. It is used only for that connection.
- Files — importing keys or backups and uploading files goes through the system file picker, so the app only sees the files you choose. Downloaded files are saved in the app's own folder, which you can see in the Files app.
The app sends no notifications and does not run in the background: iOS closes its network connections when you leave the app, and SSHBorg reconnects your sessions when you return.
Data Deletion
There is no account or server-side data to delete.
On Android
All app data can be deleted at any time by uninstalling the app or clearing app data from Android Settings.
Note: SSH private keys encrypted with the Android Keystore are permanently inaccessible after uninstalling the app. Export your public keys to your servers before uninstalling if needed.
On iOS (iPhone and iPad)
Deleting the app removes everything it stores: hosts, keys, settings, and downloaded files.
Note: the encryption key is kept in the iOS Keychain, which iOS may retain after the app is deleted. On its own it cannot decrypt anything: the encrypted data is removed together with the app.
Children's Privacy
SSHBorg is not directed at children under 13 and does not knowingly collect any information from children.
Changes to This Policy
If this policy changes, the updated version will be published at the same URL with a new "Last updated" date. This page covers both the Android and the iOS app.
Contact
Developer: Massimiliano Ballerini
If you have questions about this privacy policy, you can contact us at: massimiliano.playdev AT gmail.com
SSHBorg 隐私政策
最后更新：2026年9月13日
概述
SSHBorg（"本应用"）是一款适用于Android和iOS（iPhone与iPad）设备的SSH/SFTP客户端。本隐私政策说明应用如何处理数据、数据的存储方式以及您作为用户的权利。本政策同时适用于两个版本；两者有差异之处，会在单独的小节中说明。
我们收集和存储的数据
SSHBorg仅在您的设备本地存储所有数据。我们不运营任何服务器，也不会向我们或任何第三方传输任何数据。
本地存储的数据包括：
- 主机配置 — 您添加到应用的SSH服务器的主机名、端口、用户名，以及可选的已保存密码。
- SSH私钥 — 您在应用内生成或导入的加密密钥。
- 应用偏好设置 — 主题、语言、应用锁超时及显示选项等设置。
数据保护方式
Android
- SSH私钥和已保存的密码可选择使用Android密钥库进行加密，这是您设备提供的硬件支持的安全存储系统。启用后，加密数据将绑定到您的设备和应用安装实例。
- 应用可选择要求生物识别认证（指纹、人脸或设备PIN码）才能访问。
- 应用通过
FLAG_SECURE标志禁止截图和录屏。
iOS（iPhone与iPad）
- SSH私钥和已保存的密码可选择使用AES-256-GCM加密，密钥保存在iOS钥匙串中。该密钥绑定到您的设备，设备锁定时无法读取。
- 应用可选择要求通过Face ID、Touch ID或设备密码验证后才能访问，超时时间可设置。
- iOS不允许应用阻止截图。开启应用锁后，您离开应用时其内容会被遮盖，主机和会话不会出现在应用切换器中。
网络连接
SSHBorg仅连接到您明确配置的SSH服务器。本应用不会连接任何外部服务、分析平台、广告网络或我们自己的服务器。
所有网络流量均为您的设备与您自己服务器之间的SSH协议流量。
数据共享
我们不会与任何第三方共享、出售或传输您的数据。永远不会。
权限说明
Android
本应用申请以下Android权限：
- INTERNET — 建立SSH/SFTP连接所必需。
- USE_BIOMETRIC / USE_FINGERPRINT — 可选，仅在您启用生物识别锁时使用。
- FOREGROUND_SERVICE — 在SSH会话活跃期间显示持久通知。
iOS（iPhone与iPad）
在以下情况下，iOS可能会请求您的许可：
- Face ID — 可选，仅在您启用应用锁时使用。
- 本地网络 — 当您首次连接本地网络中的服务器时，iOS可能会请求许可，仅用于该连接。
- 文件 — 导入密钥或备份以及上传文件时使用系统文件选择器，应用只能访问您所选择的文件。下载的文件保存在应用自己的文件夹中，可在"文件"App中查看。
本应用不发送通知，也不在后台运行：您离开应用时，iOS会关闭其网络连接；返回后，SSHBorg会重新连接您的会话。
数据删除
没有账户或服务器端数据需要删除。
Android
您可以随时通过卸载应用或在Android设置中清除应用数据来删除所有应用数据。
注意：使用Android密钥库加密的SSH私钥在卸载应用后将永久无法访问。如需在卸载前备份，请将公钥导出到您的服务器。
iOS（iPhone与iPad）
删除应用即可移除其存储的全部内容：主机、密钥、设置以及下载的文件。
注意：加密密钥保存在iOS钥匙串中，iOS可能会在删除应用后仍保留该密钥。但它本身无法解密任何内容：加密数据会随应用一并删除。
儿童隐私
SSHBorg不面向13岁以下儿童，不会故意收集儿童的任何信息。
政策变更
如果本政策发生变更，更新版本将在相同URL发布，并注明新的"最后更新"日期。本页面同时适用于Android和iOS版本。
联系方式
开发者：Massimiliano Ballerini
如果您对本隐私政策有疑问，请联系：massimiliano.playdev AT gmail.com