Privacy
Privacy Policy
Mobile SSH stores its setup for your device and connects to servers and services wey you choose. E no need Mobile SSH account or cloud sync. Android optional VPN clients still route selected device traffic through di servers wey you configure.
Information wey dey store on your device
Saved data include server profiles, credentials, private keys, host identities, jump hosts, tunnel rules, session snapshots, login history, file paths, folder-access grants and app settings. Android still stores VPN/proxy setup and their secrets. iOS dey use Keychain for secrets. Android dey encrypt inventory with key wey Keystore protects, but e fit save am as plain text if encryption no dey available; WireGuard, Shadowsocks and OpenVPN profile storage must use encryption. Android cloud backup dey disabled. Optional debug logs dey stay local.
Information wey dey send over network
SSH login goes to your configured servers and jump hosts after their identity checks. Terminal, SFTP, VNC and forwarded traffic go to endpoints wey you choose. Plugin catalogs and downloads contact their configured sources. Android VPN/proxy profiles fit send other apps traffic and DNS through your SSH, WireGuard, Shadowsocks or OpenVPN servers, based on di routes wey you choose. This traffic no dey go to Mobile SSH analytics or cloud storage.
File transfer and storage access
File transfer uses folders and files wey you select, without broad storage permission. Android keeps access to di folder wey you grant. iOS fit use app folder or remember folder wey you choose for Files, and imports documents, photos and shared files through system controls. File provider wey you select fit store data for its own cloud. Opening or sharing file sends am to di app or destination wey you choose.
Log and troubleshooting
Di app records login attempts locally as you connect. Debug recording na optional: Android recorder warns say terminal diagnostics include every key wey you type, passwords too, and exports archive. iOS debug logs record connection addresses, failures, reconnects, network changes and tmux diagnostics. Check logs before you share dem; dem fit reveal server details and, for Android, secrets wey you type.
Usage analytics
When you enable am, Mobile SSH dey send feature interactions (including VPN/proxy use and terminal multiplexer type), connection diagnostics, app/OS versions, device model, language and temporary session ID through HTTPS to Aptabase to improve the app. Aptabase dey process the request IP address and User-Agent to get country/region and daily identifier wey use alias; e no dey store the original IP address or User-Agent with analytics. Events no include browsing traffic, DNS queries, server addresses, usernames, login credentials, commands or file contents. Android builds wey get analytics consent prompt need you to agree first; older Android builds and iOS dey enable analytics by default. All features dey work without analytics. Settings fit stop collection; events wey don enter queue before fit still send for iOS. Android consent dey stay only for that device, and backup restore no dey bring am back. See Aptabase data processing agreement.
Backups wey you export
Full backups include inventory and app settings, plus VPN/proxy profiles for Android. Passphrase encrypts di file; without am, passwords and private keys dey plain text. You choose where to save or share am. SSH host trust, active sessions and system folder grants no dey included. Import preview shows di sections and security preferences wey go apply.
VPN routing for Android
Device VPN routing needs Android consent and continues until you stop am or system ends am. Only one device VPN fit run at a time; local SOCKS proxy fit work with another VPN. SSH routing carries TCP and DNS, while other UDP assigned to SSH gets blocked. Stopping, switching or terminating di app ends di old VPN protection; Mobile SSH no provide always-on or lockdown guarantees.
Permissions
- Internet: e dey work for your SSH, file-transfer, desktop, VPN and plugin connections, plus analytics if enabled.
- Wake lock and Wi-Fi lock: use for Android to keep active SSH session alive while device dey sleep.
- Foreground service and notifications: use for Android to handle active connection for background; for iOS, notifications na for agent alerts.
- File access: you grant am through system folder, document and photo pickers; iOS fit remember external Files folder. Neither platform asks for blanket storage access.
- VPN consent (Android): Android must grant am before built-in VPN client fit route device traffic. SOCKS-only proxy no occupy di device VPN slot.
- USB and NFC (Android): dem dey communicate with physical FIDO2 security key for enrollment or SSH signing, with USB access and touch/PIN confirmation when needed.
Security responsibilities
Protect your device and exported backups. Compare unknown SSH fingerprints through trusted channel: disable Android automatic acceptance of new identities if you want approve first use; iOS asks by default. Find why key change before you replace saved identity. Secure screen blocks screenshots and recording for Android; iOS hides app-switcher preview and recording/mirroring, but e no fit block manual screenshots.
Contact
Support contact: mobile.ssh.info@gmail.com.