Privacy Policy

Connections you choose

XTermX connects to XTermX hosts and SSH servers that you select. Terminal output, commands, messages, agent activity and files you choose to send travel to or from those hosts. Host names, pane names, host usage data and device identity information may be exchanged to display and secure your sessions.

The applications do not send terminal sessions to a C. Cassel-operated collection backend. They do not include advertising, cross-app tracking, or developer analytics SDKs. XTermX does not sell your personal data.

Data stored on your devices

Pairing credentials, an installation identity key and SSH authentication secrets are stored using the system Keychain. Saved SSH destinations, usernames, startup commands, known host keys and display preferences are stored locally using app settings.

The iPhone and its paired Apple Watch exchange host state, screen text, requests and pairing information through Apple's WatchConnectivity system. Pairing credentials are shared with your Watch so it can connect directly when needed.

Permissions and selected files

• Camera: used to scan a pairing QR code when you choose that action.
• Local network: used to reach hosts on your network.
• Photos and videos: the system picker gives access to items you select, rather than broad photo-library access.
• Files and clipboard: items are read when you select a file or choose a paste action. Temporary copies made for a transfer are removed after the operation.
• Dictation: text entered with the system keyboard's dictation is handled by the operating system's dictation service, not a XTermX recording backend.

Your hosts and other services

Your Mac, Linux host, SSH server and any coding agents or services you run there can store terminal history, commands, files or messages according to their own settings and policies. Sending a command to an AI agent on your host may cause that agent to send information to its provider. XTermX does not control those providers.

XTermX host traffic uses authenticated encrypted frames, and SSH uses its own encrypted transport. You are responsible for choosing trusted hosts and protecting their accounts and pairing credentials.

Retention and your choices

You can forget paired hosts and delete saved SSH destinations in the app. Deleting a saved SSH destination also removes its stored authentication secret and known-host entry. To revoke existing pairings at the host, use Forget all devices there.

Removing an item locally does not delete terminal history or files already stored on a remote host. Manage those on that host. System backup and Keychain behavior are controlled by Apple and your device settings; this policy does not promise that uninstalling the app removes every credential or remote copy.

Support and this website

If you contact support, we receive the email address and information you choose to send and use them to respond and investigate your request. Please omit secrets and unrelated personal information. To request deletion of a support conversation, email cassel@cassel.us.

This support website is hosted on GitHub Pages without developer-added analytics or advertising. GitHub may process connection information under its privacy statement. Public GitHub issues are visible to others; use email for private reports.

Changes

We will update this page when the app's data practices change and revise the effective date. For questions about this policy, contact cassel@cassel.us.