Privacy Policy

Last updated: 3 July, 2026

SSHush is built so that your data stays yours. The short version: SSHush collects nothing about you, runs no servers of its own, and cannot see your servers, your credentials, or your metrics. The longer version is below.

Who this covers

This policy covers the SSHush app for iPhone and iPad, and the website at sshush.app.

The app collects no data

SSHush contains no analytics, no tracking, no advertising, and no telemetry. It does not create an account, does not have a user profile, and does not report anything about how you use it back to the developer or to any third party. There is no data collection to opt out of, because there is none to begin with.

There is no SSHush server

SSHush has no backend. When you connect to one of your servers, your device talks directly to that server over SSH. Your metrics, your commands, and your credentials never pass through any system operated by SSHush, because no such system exists. This is a core design choice, not a setting.

What SSHush stores, and where

Everything SSHush needs to work is stored on your device and, if you use iCloud, in your own private iCloud account:

• Server details. The name, host, port, and username you enter for each server, along with the host key fingerprint SSHush verified, are stored on your device using Apple's SwiftData. If iCloud is enabled, this list syncs across your own Apple devices through your private iCloud database (CloudKit). It is not visible to the developer or to anyone else.
• Credentials. Your SSH passwords and private keys are stored in your iCloud Keychain, encrypted by Apple. They sync between your devices the same way your other Keychain items do. SSHush only ever reads a credential to make a connection to the server it belongs to.

Because this data lives in your device and your private iCloud, it is governed by the Apple Customer Privacy Policy (https://www.apple.com/legal/privacy/) for iCloud and Keychain. The developer has no access to it.

System permissions

• Local network. iOS may ask SSHush for permission to access devices on your local network. This is used only to reach servers you add by their local network address. SSHush does not scan your network or catalogue what is on it.

Required-reason system APIs

Apple requires apps to declare certain system APIs and why they use them. SSHush uses:

• UserDefaults, to remember your settings such as the refresh interval. This stays on your device.
• System boot time, to calculate and display each server's uptime. This is a reading from the server, shown to you and not stored or sent anywhere.

Neither of these involves collecting data about you.

The ratings prompt

SSHush may occasionally ask you to rate it, using Apple's standard system prompt. This is handled entirely by Apple. SSHush does not see whether or how you rate it, and no data is collected.

The website

The website at sshush.app is served by Caddy on a DigitalOcean server, with request logging turned off. It sets no cookies, runs no analytics, and uses no advertising or tracking. The site collects nothing about visitors.

Third parties

The app shares nothing with third parties, because it collects nothing and has no backend. The only third party involved is Apple, through iCloud and Keychain, which store your own data on your behalf.

Children

SSHush is a tool for people who administer servers. It is not directed at children and collects no data from anyone.

Changes to this policy

If this policy changes, the updated version will be posted here with a new effective date. Because SSHush collects no data, changes are expected to be rare and minor.

Contact

Questions about privacy can be raised using the 'Contact' link in the footer.