Shinphony Privacy Policy

1. Information stored on your device

Shinphony stores the server profiles, connection settings, preferences, and workspace state you create so the app can provide its features. Credentials and private keys are protected using platform secure storage, such as the iOS Keychain. This information remains on your device unless you choose to export, copy, or otherwise share it.

2. Direct server connections

When you connect using SSH or Mosh, transfer files using SFTP, or work with a remote Git repository, Shinphony communicates directly with the server you configured. Except for optional task-notification context described below, Potafree does not proxy, receive, store, or inspect:

• server addresses or login credentials;
• terminal commands, output, or session history;
• remote file names or file contents; or
• Git repository data, diffs, or commit history.

The server and network provider you select may log connection information under their own policies. You are responsible for the servers and accounts you access.

3. Files and permissions

Shinphony only accesses files you select or locations you authorize through system interfaces or configured desktop paths. File access is used to import SSH keys, upload files to a server, or save downloaded files as requested by you. You can manage applicable file and app permissions in your operating system settings.

4. Analytics, tracking, and advertising

Shinphony does not contain advertising SDKs or third-party analytics and does not track you across apps or websites. We do not sell or rent personal information.

Apple may process App Store purchases and optional device diagnostics under Apple’s own privacy terms. Potafree does not receive your complete payment card details.

Local text cleanup

Copy cleanup runs on your device. It can join wrapped lines, remove quotation prefixes, and repair split links in the selection you review. The current release does not include AI rewriting, API-key configuration, or requests to an AI provider.

Text is placed on the system clipboard only when you choose to copy it. Your operating system may offer clipboard sharing across your devices under its own settings. Review commands, numbers, and links before using cleaned text.

In-app purchases in supported iOS builds

On iPhone and iPad, supported builds use Apple's StoreKit to offer and restore an optional one-time Pro purchase. Apple processes payment and provides verified purchase information to the app. Ordinary local Pro access is checked on your device. Pro notification limits additionally use signed purchase proof to our notification relay for verification with Apple, as described below. We do not receive your Apple Account password or full payment card details.

No Shinphony account or email login is required. The macOS and Windows apps do not use a device-registration or activation service. Existing server profiles, credentials, and open terminal tabs are not deleted if a Pro entitlement is revoked.

Optional task notifications

No invitation or Potafree account is required in supported builds. If you enable notifications, the relay receives an APNs device token, opaque device/host/event identifiers, scoped notification credentials and, for Pro verification, signed purchase proof. Basic task notifications and Live Activities are free; Apple verification establishes Pro notification limits; the relay retains transaction identifiers and entitlement status, not raw signed purchase proof. Device and pairing records route events and prevent unauthorized delivery.

Supported releases include task context: supported host integrations send task titles, agent/thread identifiers, tmux session/window names and a short terminal preview through Potafree and Apple. A preview contains at most six lines and 700 UTF-8 bytes. It may include sensitive text displayed by your tools. We do not promise automatic secret redaction. Notifications can appear on your lock screen according to your iOS settings. We do not continuously upload your terminal session.

The relay holds context while an event is queued and clears its live context field when processing reaches a terminal state. Delivery attempts expire after five minutes; event records older than one day are removed during maintenance. This is not a promise of immediate physical deletion from storage or backups. Apple and your device may retain delivered notifications under their own settings and policies.

Device registration persists until removed. Disable and remove all pairings deletes this device’s live relay registration; revoking a host disables that host’s notification credential. Cleanup is available without an active Pro entitlement. Disabling system notification permission alone does not delete relay records or uninstall the host service.

The optional service runs on your chosen SSH host after consent. It stores configuration, bounded recent task context, session-routing records, workspace paths and installation/update diagnostics on that host. Signed updates download executables for that host, not executable code for iOS. Routing snapshots and event references have bounded retention and are cleaned during host maintenance. Uninstall the host service and remove its local data when no longer needed.

Local drafts, web projects and screenshot feedback (version 1.0.2)

Terminal drafts and safe diagnostic summaries are held only in memory. Drafts are not restored after app termination. Saved web projects are stored locally per host; query strings and fragments are omitted, but host names and paths remain. Remove entries from Saved web projects if you no longer need them.

Web screenshots capture the visible viewport into memory. Cropping, annotations and opaque covers are processed on your device. Only after you confirm an upload is the flattened image transferred directly to the selected SSH server via SFTP. We do not receive or host that image. Inspect images for visible secrets before sharing; protected media may not appear in a capture.

The optional copied diagnostic summary contains only platform, build mode and up to twelve recent category/state pairs. It excludes host identities, URLs, tokens, command text and terminal output, and is never sent automatically. This summary is separate from platform or Windows crash logs, which may contain more detail and should be reviewed before sharing.

5. Support communications

If you contact us for support, we receive the email address, message, and attachments you choose to send. We use them only to respond, investigate the issue, protect our services, and meet legal obligations. We retain support communications only as long as reasonably necessary for those purposes.

Please never send passwords, private keys, recovery codes, or other secrets in a support request.

6. Data deletion

You can remove saved servers, keys, and workspace data from within the app. Deleting Shinphony removes its locally stored app data, subject to normal operating system backups and secure-storage behavior. To request deletion of a support conversation, contact us using the address below.

7. Children

Shinphony is a general-purpose developer tool and is not directed to children. We do not knowingly collect personal information from children through the app.

8. Changes to this policy

We may update this policy when Shinphony’s features or legal requirements change. We will post the revised policy here and update its effective date.

9. Contact

Questions or privacy requests can be sent to Potafree LLC at yongsheng@potafree.net.