Privacy Policy
AI Terminal ("the app") is developed by an independent developer ("we", "us"). This policy explains what data the app collects, why, and how you can delete it.
1. Information we collect
Account information. When you sign in with email/password or Google, Firebase Authentication stores your email address and, for Google sign-in, your name and profile photo.
Data synced to our backend (Cloud Firestore), scoped to your account only:
- SSH session metadata — host, port, username, label (never passwords or private keys)
- Services-dashboard command and environment labels you configure
- Deploy-app configuration you create
- Non-secret app settings (theme, startup view, etc.)
- AI chat transcripts and agent run history, so they sync across your devices
- Error logs generated by the app to help diagnose crashes
- If you enable "secret sync": an encrypted blob of your credentials that we cannot decrypt (see below)
Optional secret sync. If you turn on "secret sync" to share credentials across your own devices, the app encrypts them on-device (AES-GCM, key derived from a passphrase only you know) before uploading the ciphertext to Firestore. Your passphrase is never sent to us — we cannot decrypt this data. If you never enable this feature, no secret material ever leaves your device.
2. Data sent to third parties you configure
The app is "bring your own key": if you use the AI panel, the text of your request is sent directly from your device to the AI provider you selected (Anthropic, OpenAI, Google, OpenRouter, or OpenCode Zen) using the API key you supplied. That exchange is governed by the chosen provider's own privacy policy — we are not a party to it and do not receive a copy.
Similarly, when you connect to an SSH server, database, or S3 bucket you configured, the connection goes directly from your device to that server. We never see that traffic.
3. How we use information
Solely to operate the app: authenticate you, sync your sessions/settings/chat history across your own devices, and let you use the app-lock (biometric check, verified entirely on-device — we never receive your biometric data). We do not run ads, do not use analytics or tracking SDKs, and do not sell or share your data with advertisers.
4. Data retention
Synced data is retained until you delete it in-app or delete your account.
5. Deleting your account and data
Open the app → Settings → Account → Delete Account. This immediately and permanently deletes your Firestore data (sessions, config, chat, agent runs, error logs) and your Firebase Authentication record. Device-only secrets for your account are also erased from local secure storage.
If you can't access the app, email skgnandy@gmail.com from the address on your account and we will delete your account and associated data within 30 days.
6. Security
Data in transit uses TLS/HTTPS. Secrets are stored using platform-provided secure storage. No method of transmission or storage is 100% secure, but we follow standard industry practice.
7. Children's privacy
AI Terminal is a developer tool not directed at children. We do not knowingly collect data from anyone under 13.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the effective date above.
9. Contact
Questions or data requests: skgnandy@gmail.com