Last updated: October 12, 2026

Hey Terminal provides a local terminal and SSH client for iPhone and iPad. This policy explains how the app and its connected services handle information.

1. Data Collection and Usage

SSH configuration, local files, and imported or generated SSH keys are stored locally in the app’s storage. Passwords entered for SSH are used to authenticate with the server you choose.

An SSH connection sends terminal input and applicable authentication information directly to your chosen server over SSH. That server’s operator controls its own logging and retention.

Hey Terminal does not send SSH terminal contents, remote command text, command arguments, file contents, passwords, or private keys to its leaderboard or Analytics services. Analytics may record coarse local command categories, such as whether a local command was used, without its arguments.

The app also uses usage analytics described below. Optional Halloween ranked play handles additional information as described in section 7.

2. Third-Party Services

Firebase Analytics, provided by Google, processes app-instance identifiers, device and app information, and usage events to help us understand app usage. Events include tab actions, coarse local command categories, and Halloween participation.

Custom Halloween events do not include nicknames, participant or run credentials, movement transcripts, or exact completion times. Their parameters contain fixed event identifiers and, where applicable, broad outcome, turn-count, and candy-count categories.

Firebase App Check and Apple’s App Attest process app/device attestation information and tokens to help protect ranked requests from abuse. These services do not require a player login.

Cloudflare hosts the leaderboard and its database. Google, Apple, and Cloudflare may process technical and network information under their own policies. Apple also provides App Store services and analytics under its privacy controls.

Provider information: Firebase Privacy and Security, Apple Privacy Policy, and Cloudflare Privacy Policy.

3. Data Security

We use SSH for remote terminal connections and HTTPS for leaderboard requests. Local configuration and SSH key files remain in the app’s local storage. Halloween participant credentials are stored in device-only Keychain storage, and the leaderboard stores secret credentials as hashes.

Administrative leaderboard access is restricted. No security measure can guarantee protection against every threat, particularly on a compromised device. Protect your device, credentials, and chosen SSH servers.

4. Children’s Privacy

We do not knowingly collect personal information from children under 13. If you believe a child has supplied personal information through the app or leaderboard, contact us so we can investigate and arrange appropriate removal.

5. Changes to This Policy

We may update this policy when the app or its data practices change. The “Last updated” date identifies the latest revision. The current policy is available through the app’s Settings.