Privacy Policy

The short version

AquaSSH is a local-first app. By default it collects and transmits nothing about you. The app has no accounts, no ads, and no analytics or tracking of any kind. The only network connections it makes are the SSH/SFTP connections you explicitly open to your own servers.

This website is a little different from the app. Buying a licence involves the personal data needed to take the payment and email you a key, and we count downloads so we know which platforms to support. Both are set out in full below.

Data stored on your device

• Hosts, snippets and settings are stored in a local database on your device.
• Private keys, passwords and your Pro licence are stored in your operating system’s secure storage (Keychain on macOS, Keystore on Android, libsecret on Linux, DPAPI on Windows). They are never sent to us — we have no servers to send them to.
• Backups are files you create, encrypted with a passphrase only you know (Argon2id key derivation, AES-GCM encryption). We cannot read or recover them.

Crash reports (opt-in only)

Some builds can send crash reports via Sentry to help us fix bugs. This is off by default and only happens if you enable “Send crash reports” in Settings → Privacy. Crash reports contain stack traces and device/OS information; they never include your hosts, usernames, keys, passwords or terminal content. Disable the toggle at any time; it applies from the next launch. To request deletion of past crash data, email us.

Buying a licence on this website

Paddle.com Market Ltd is our reseller and merchant of record. Paddle runs the checkout and is the data controller for payment data. To take your payment and charge the correct tax, Paddle collects your email address, billing country and postal code, your payment details, and your IP address for tax determination and fraud prevention. We never see your card details. Paddle’s privacy policy applies to the checkout.

Paddle passes us the completed order, from which we store:

• your email address;
• the order reference;
• the licence key we issued, and the date we issued it;
• the order amount, currency and billing country, for accounting;
• a record of each licence email we send, so we can tell whether delivery succeeded.

This is the “licence issuance log”. We use it for exactly three things: emailing you your key, re-sending it when you ask, and our own tax and accounting records. It is never used for marketing, and we do not sell or share it.

How long we keep it

Indefinitely, by design. Your Pro licence is perpetual, which means we need to be able to re-issue your key years from now — deleting the record would take that away from you. Accounting records are also subject to statutory retention periods. If you would rather we erased your record anyway, email us and we will, but be aware we will then no longer be able to resend your key.

How your key is verified

Offline. The app checks a cryptographic signature on the key using a public key built into the binary. There is no activation server, no licence check on launch, and no device fingerprinting. Nothing about your usage reaches us.

Google Play purchases

Pro bought on Android is handled entirely by Google Play. We receive aggregate sales figures from Google; we do not receive your email address or payment details and we hold no issuance record for those purchases.

This website

The site is static and sets no analytics or advertising cookies. Our host records standard server logs (IP address, user agent, requested URL) for security and abuse prevention, retained briefly. The Paddle checkout script loads from Paddle’s CDN and sets its own cookies — again, covered by Paddle’s policy.

Download counts

When you click a download button, the link passes through our own server before handing you the file. We record which platform was downloaded, the version, the two-letter country the request came from, the referring page, the browser user-agent string, and the time.

We do not store your IP address. The country is worked out at the network edge and the address itself is never written down. No cookie is set, no JavaScript is involved, and the record contains no name, email, licence key or customer ID — there is nothing in it that identifies you, and it is never combined with purchase or licence records. We keep these rows for 400 days so we can compare one release against the last, then delete them.

We do this on the basis of our legitimate interest in knowing which platforms people actually use, so that support and development effort go to the right place. It is not used to profile anyone or to target advertising.

Your rights

Depending on where you live you may have the right to access, correct, export or erase your personal data, and to object to its processing. Because we hold so little, most requests are simple to satisfy: uninstalling the app removes everything held on your device, and the only records we keep are the licence issuance log and the download counts described above. Download counts contain nothing that identifies you, so we cannot look yours up or remove them individually. For a request, email [email protected]. For data held by Paddle as merchant of record, contact Paddle directly.

Changes

If this policy changes, the date above is updated and material changes are noted in release notes.

Contact

[email protected]. See also our terms and refund policy.