Privacy Policy

FOSFiles ("we", "us", "our") builds FOS Terminal for Android. This privacy policy explains what data we collect, how we use it, and your rights.

Short version: We collect almost nothing. We don't sell data. Your SSH keys and session logs never leave your device unless you explicitly opt in to cloud sync.

Data we collect

App analytics (opt-in only)

Firebase Analytics is disabled by default. You can enable it in Settings → Privacy → Analytics. If you opt in, we collect anonymised, aggregated usage data: screens visited, features used, session duration. This data does not include your SSH hosts, keys, commands, or session content.

Crash reports

Firebase Crashlytics collects crash reports. Crash reports include the device model, Android version, app version, and a stack trace. They do not include your SSH hosts, keys, commands, sessions, or any personal information. Crash reporting is on by default and can be disabled in Settings → Privacy → Crash reporting.

Purchase data

All purchases (Pro subscription, Lifetime) are handled by Google Play. We receive only an anonymised purchase token from Google — not your payment details, name, or email address. See Google's privacy policy for how they handle payment data.

Cloud sync (Pro, opt-in)

If you enable cloud sync, we store your host configurations, theme preferences, and snippets in Firebase Firestore, linked to your Google account identifier. Private SSH keys are never synced — they remain on your device only. You can delete your synced data at any time in Settings → Cloud sync → Delete cloud data.

Support emails

If you email us at [email protected], we store your email address and the content of your message in order to respond. We don't add you to any mailing list.

Data we never collect

• SSH host addresses, usernames, or passwords
• SSH private keys (stored locally in Android Keystore only)
• Session content, commands run, or terminal output
• Session logs (stored locally, encrypted, on your device only)
• Files accessed via SFTP

Third-party services

• Google Play — app distribution and in-app purchases
• Firebase Crashlytics — crash reporting (can be disabled)
• Firebase Analytics — usage analytics (disabled by default, opt-in only)
• Firebase Firestore — cloud sync storage (Pro, opt-in only)
• Google Sign-In — authentication for cloud sync (Pro, opt-in only)

We do not use advertising networks, data brokers, or any tracking SDKs. This website has no analytics, no cookies, and no tracking of any kind.

Data retention

• Crash reports: retained by Firebase for 90 days
• Analytics (if opted in): retained by Firebase for 14 months
• Cloud sync data: retained until you delete it or request account deletion
• Support emails: retained for up to 2 years for support continuity

Your rights (GDPR / EEA users)

If you're in the European Economic Area, you have rights under GDPR:

• Access: request a copy of the data we hold about you
• Deletion: request deletion of your data (cloud sync: Settings → Delete cloud data; crash/analytics data: email us)
• Portability: request your data in a machine-readable format
• Objection: opt out of analytics and crash reporting at any time in the app's Privacy settings

To exercise these rights, email [email protected].

Children

FOS Terminal is not directed at children under 13. We don't knowingly collect data from children under 13.

Changes to this policy

If we make material changes, we'll update the "Last updated" date above and announce it in the app changelog. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

Questions about privacy: [email protected]

FOSFiles
For postal address, please email us.