Privacy Policy

The short version

AstraSSH is a tool for managing servers that belong to you. Everything you enter stays on your device, or goes directly to the servers you connect to. The developer, Dário Jr, never receives it, and cannot see it.

What stays on your device

• Your server list (names, addresses, user names, tags, notes) and your snippets are stored in the app's private storage on your device.
• Passwords, private keys, passphrases and API tokens are stored in the system Keychain, and can be protected with Face ID, Touch ID or your passcode.
• Session material, such as Proxmox tickets and SSH sessions, exists only in memory and is discarded when you disconnect.
• The diagnostics log is kept on your device with secrets removed before anything is recorded. It is never sent anywhere; you can read it and choose to share it yourself.

Connections the app makes

• Your servers. The app connects to the SSH servers and Proxmox VE hosts you add, over SSH and HTTPS. What you send them is between you and them.
• The community-scripts catalog. When you open Community Scripts, the app downloads the public catalog from the community-scripts project (db.community-scripts.org) and script sources from GitHub. Those services see a normal web request, including your IP address, and nothing about your servers.
• Apple. Purchases, and iCloud if you turn it on, are handled by Apple as described below.

The demo servers included in the app are simulated on your device and make no network connections.

iCloud sync (optional)

iCloud sync is off until you turn it on, and you choose what it covers. When it is on, your server list and snippets are stored in your private iCloud storage so your other devices can read them. For the servers you select one by one, credentials are stored in iCloud Keychain, which is end-to-end encrypted. Trusted SSH host keys and pinned certificates are never synced.

This data is held by Apple under your Apple Account and is governed by Apple's privacy policy. The developer has no access to it.

Purchases

AstraSSH Pro is bought through the App Store. Apple processes the payment; the developer never receives your name, email address or payment details, only aggregate sales reports from Apple.

Notifications

Notifications are optional and generated on your device while the app is running. The app does not register with any push notification service.

What the app does not do

• It does not collect analytics, usage statistics or crash reports of its own.
• It does not contain advertising or third-party tracking code.
• It does not ask you to create an account.
• It does not sell or share data, because it has none to share.

Deleting your data

Removing a server in the app deletes its record and its credentials. Deleting the app removes everything it stored on that device. Data you chose to sync can be removed by turning sync off for it, or from your iCloud settings.

Children

AstraSSH is a tool for system administrators and is not directed at children.

Changes and contact

If this policy changes, the new version will be published on this page with a new date.