Privacy Policy

1. What HQSSH Is

HQSSH is a mobile SSH app that lets DevOps engineers manage AI CLI tools (Claude Code, Codex, Aider) across remote systems. It connects directly to your servers over SSH — no accounts or sign-up required.

2. Data Stored on Your Device

HQSSH stores the following data locally on your device. None of this data is sent to Gelotto or any third party.

• -System configurations — hostnames, ports, usernames, and authentication method preferences (stored in plaintext via Hive CE)
• -Credentials — passwords, SSH private keys, and key passphrases (encrypted using Android Keystore or iOS Keychain, never stored in plaintext)
• -Terminal settings — display preferences and keyboard toolbar configuration
• -Snippets — saved commands and text snippets you create
• -SSH key metadata — key names, types, public keys, and fingerprints

3. Data Transmitted to Your Servers

When you connect to a remote system, HQSSH sends SSH traffic directly to your server. This connection is encrypted end-to-end using the SSH protocol. Gelotto never sees, intercepts, or stores any of this traffic.

• -SSH connections go point-to-point from your device to your server
• -gRPC communication with the HQSSH daemon travels over the same encrypted SSH tunnel
• -No data is relayed through Gelotto infrastructure

4. Analytics & Crash Reporting

HQSSH uses Google Firebase for basic analytics and crash reporting. This helps us understand how the app is used and fix bugs.

Firebase Analytics collects:

• -Screen views (which screens you visit)
• -Categorized events (e.g. ssh_connect success/failure, session_create with tool name)
• -Device info automatically collected by Google (device model, OS version, app version)

Firebase Crashlytics collects:

• -Crash reports with stack traces
• -Device state at the time of a crash (memory, battery, etc.)

Firebase data is processed by Google under their own privacy policy. See Google's Privacy Policy for details.

5. What We Do NOT Collect

• -No user accounts or email addresses
• -No cloud sync of your data
• -No advertising or ad tracking
• -No location data
• -No access to contacts, photos, camera, or microphone
• -No server-side storage of your SSH credentials or terminal sessions

6. Data Deletion

You are in full control of your data.

• -Delete individual systems, keys, and snippets directly in the app
• -Uninstalling the app removes all locally stored data from your device
• -Firebase analytics data is handled per Google's data retention policies. Contact admin@gelotto.io to request deletion of Firebase data associated with your device

7. Children's Privacy

HQSSH is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at admin@gelotto.io and we will delete it.

8. Third-Party Services

HQSSH uses only one third-party service: Google Firebase (Analytics and Crashlytics). No other third-party SDKs, ad networks, or tracking services are included in the app.

See Google's Privacy Policy for details on how Firebase processes data.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of HQSSH after changes constitutes acceptance of the revised policy.

10. Contact