Privacy Policy

The short version

Weiming Terminal collects nothing about you. No analytics. No telemetry. No crash reporting. No third-party SDKs. No advertising. No tracking. The app does not contact any server we operate, ever.

Everything you put into the app — saved hosts, usernames, passwords, private keys, host key fingerprints, snippets, recent connections — lives only on your device. Credentials are stored in the iOS Keychain (and the Secure Enclave for device-bound keys). Other metadata is stored locally via SwiftData.

The only network connections the app makes are SSH connections to the servers you explicitly add. Those go straight to your servers — no proxy, no relay, no middleman.

Data we collect

None. Our App Privacy disclosure on the App Store is "Data Not Collected."

This is a deliberate product decision, not just a policy. The app contains no analytics SDKs, no crash reporters, no advertising frameworks, no remote config, no push notifications, and no servers we operate. There is no account to create. There is nothing to opt out of because nothing is being collected in the first place.

Data you provide

When you add an SSH host, the app stores the following on your device only:

• Host label, hostname or IP address, port, and username (SwiftData, on-device)
• Authentication material — password, imported Ed25519 private key, or a reference to a device-bound Secure Enclave key (iOS Keychain; Secure Enclave keys never leave the enclave)
• Host key fingerprints accepted via trust-on-first-use (SwiftData, on-device)
• Saved snippets and recent connections (SwiftData, on-device)
• App preferences such as theme, font size, key bar visibility (UserDefaults, on-device)

None of this is transmitted off your device by Weiming Terminal.

Network activity

Weiming Terminal makes only outbound SSH (port 22 by default, or any port you specify) connections to the hosts you configure. SSH traffic is end-to-end encrypted between your device and the remote server using SwiftNIO SSH (Curve25519 + AES-GCM).

Because SSH hosts can include private addresses (192.168.x, 10.x, .local, Tailscale, etc.), iOS will prompt you the first time the app attempts a local-network connection. You can grant or deny this in iOS Settings → Weiming Terminal → Local Network.

Biometric authentication

If you enable the launch lock or biometric protection on a credential, Weiming Terminal uses Apple's LocalAuthentication framework to ask iOS to perform Face ID, Touch ID, or Optic ID authentication. The app never sees, stores, or transmits any biometric data — iOS handles biometric matching internally and only returns a yes/no result.

Encryption and export compliance

Weiming Terminal uses encryption only through Apple's CryptoKit and Security frameworks and through the open-source SwiftNIO SSH package. All cryptography is standard and published. Under U.S. EAR Category 5 Part 2, this qualifies for the standard mass-market exemption, which is declared in the app's Info.plist via ITSAppUsesNonExemptEncryption=false.

Children's privacy

Weiming Terminal is rated 4+ on the App Store, but it is a developer tool and is not directed at children. We do not knowingly collect personal information from anyone — including children — because we do not collect personal information at all.

Third parties

Weiming Terminal does not embed any third-party analytics, advertising, attribution, or tracking SDKs. The only third-party code in the app is the open-source Swift packages it depends on for SSH protocol handling and terminal rendering — none of which contact any server.

Standard App Store and TestFlight diagnostics provided by Apple (such as crash reports automatically sent to Apple if you opt in via iOS Settings → Privacy & Security → Analytics & Improvements) are governed by Apple's privacy policy, not ours.

Changes to this policy

If we ever materially change what the app does, we will update this policy and bump the "Last updated" date above. The "Data Not Collected" stance is a product cornerstone — we do not anticipate ever changing it.

Contact

Questions about this privacy policy or about the app's data handling can be sent to terminal@weiming.ai.