SSH Pad Privacy Policy

Publisher: Cloudbit d.o.o., Zagreb, Croatia · Contact: Contact Us · Last updated: 13 November 2026

SSH Pad is an SSH terminal and SFTP client for your phone. It connects directly from your device to the servers you add. There is no SSH Pad account, no SSH Pad server that your data passes through, no ads and no analytics. We do not sell your data.

Data stored on your device

Everything you enter in the app stays on your device: hosts, usernames, ports, forwards, snippets, known host fingerprints and settings.

Passwords, private keys and key passphrases are stored in the secure storage of your phone (iOS Keychain, Android Keystore). They are used only to authenticate to the servers you connect to. They are never sent to us or to any third party, and are not included in the app's analytics or crash data, because there is none.

Connections to your servers

When you connect, the app opens a network connection from your device to the host you entered, and everything you type or transfer goes to that server over SSH. We have no access to these connections or to their content. The servers you connect to have their own privacy practices.

Files, photos and clipboard

The app reads files or photos only when you choose them, for example to import a key or upload a file over SFTP, using the system picker. Downloaded files are saved where you choose. Clipboard content is read only when you paste, and written when you copy.

App lock

If you turn on app lock, the app asks your phone to verify you with Face ID, Touch ID or your device passcode. The app never receives your biometric data.

Practice server

The optional practice server is the public demo service test.rebex.net, operated by Rebex, not by us. If you connect to it, your device sends traffic to that third party, and its operator may log it. Do not use it for anything private. It may be unavailable at any time.

Purchases

Unlocking SSH Pad Pro is a one-time purchase, handled by Apple (or Google Play). We never see your payment details. To manage the purchase we use RevenueCat, Inc. (USA), which receives an anonymous app user identifier and the store's purchase record so that your Pro status can be checked and restored on your devices. No names, emails or SSH data are sent.

Analytics and crash reports

The app contains no analytics, advertising or tracking libraries, and does not collect crash reports. Apple and Google may provide us with anonymous crash and usage statistics if you have allowed that in your phone settings.

Cookies

The app does not use cookies.

Legal basis (GDPR)

Because the data you enter stays on your device and is not processed by us, we do not hold personal data about you. Handling the purchase is based on performance of a contract, Art. 6(1)(b).

Retention and your rights

You control your data. Deleting a host, key or snippet in the app removes it from your device, and uninstalling the app removes all of it. You can contact us at the address above with any question, and you can complain to your data protection authority.

Security

Connections use SSH, and the app asks you to verify a server's fingerprint the first time you connect and warns you if it changes. No method of electronic storage or transmission is 100% secure, so we cannot guarantee absolute security.

Children’s Privacy

The app is not directed at children under 16. We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date above.

This policy is effective as of 2026-11-13