Privacy policy

Effective with Herdy 1.2.0

Herdy connects your terminal directly to the SSH or Mosh hosts you configure. Optional agent-attention notifications use Herdy’s notification relay and Apple or Google’s push delivery service. Herdy does not require an account, serve ads, or include analytics or tracking SDKs.

Information stored on your device

Saved hosts, preferences, terminal history, and credentials are stored on your device. Sensitive credentials use the secure storage provided by iOS or Android.

Connections you initiate

Herdy sends terminal input and selected files directly to the remote host you configure. Those connections are governed by the host and network services you choose.

Optional agent-attention notifications

Notifications are off by default. If you enable them, Herdy registers a device push identifier and random installation identifier with its notification relay. The relay stores your selected alert categories and opaque identifiers for the saved hosts you choose to watch.

A watcher on each selected host sends the alert type, multiplexer and session names and identifiers, and agent and pane identifiers so tapping an alert can open the right agent. Session names are chosen by users and may contain project names or personal information. The relay forwards these routing names and identifiers to the push provider without storing the routing payload. Lock-screen alerts contain generic text.

The relay does not receive SSH passwords, private keys, terminal output, prompts, voice recordings, or files. Terminal connections remain direct to your chosen hosts.

Relay registrations expire after 30 days without refresh. Accepted event identifiers are retained for seven days to suppress duplicate retries. Turning notifications off deletes the device registration and host subscriptions at the relay; turning off one host revokes that subscription. Changes need a working network connection to be confirmed.

Push delivery uses Firebase Cloud Messaging and, on Apple devices, Apple Push Notification service. Firebase uses an installation identifier to deliver messages and may process technical service information such as IP addresses. Provider retention and deletion are separate from deletion of Herdy’s relay registration. See Firebase’s privacy and retention information and Apple’s privacy policy. Disabling alerts stops relay delivery and Firebase auto-initialization; it does not request deletion of the Firebase installation identifier.

Microphone and speech recognition

Voice input is optional. When used, audio and transcription may be processed by the speech-recognition service provided by your device or operating-system vendor under its own privacy terms. Herdy does not receive a separate copy.

Photos and files

Herdy accesses only photos or files you explicitly select for upload to your configured host.

Contact

Questions can be sent to ren@ghostworkers.dev.