Privacy policy

Your server, your connection

ServerPilot connects directly from this device to the SSH server you choose. Your SSH traffic does not pass through a CodeKits relay or developer server. No ServerPilot account is required.

Encrypted in transit

SSH encrypts commands, credentials and results in transit. Verify the host fingerprint before connecting: a saved fingerprint blocks a different host key. Your private key is used locally to sign authentication and is not sent to the server. Password authentication sends the password to your chosen SSH server inside the encrypted connection.

Protected on this device

Passwords, private keys and passphrases are stored in Apple's encrypted Keychain, accessible while the device is unlocked, with device-only accessibility and no iCloud Keychain sync. They are not migrated to another device through a backup.

Server names, addresses, usernames, host fingerprints and recent activity are stored in the app's sandbox using iOS file protection. They are not separately encrypted by ServerPilot and may be included in device backups according to your Apple settings. Monitor connection preferences use local system settings storage.

Device access controls protect the app; ServerPilot does not currently have a separate Face ID lock. Protect your device and backups. A compromised phone or server can expose information despite transport encryption.

Terminal, logs and activity

Terminal text, commands and fetched server logs are kept in memory, not saved as a transcript by ServerPilot. The terminal disconnects when you leave it or background the app. Your SSH server may independently retain shell history, login records and audit logs.

The latest 100 service actions are stored locally with the server name, action, outcome and time. Raw terminal commands and output are excluded. Removing a server deletes its saved profile and credentials, but does not remove past activity entries.

In version 1.0.0 build 4 and later, use Settings → Privacy & security → Clear local activity to erase this app’s activity history. This does not erase server-side records, exports or existing backups.

Optional monitoring is different

If you connect an alert monitor, the app contacts the HTTPS endpoint you choose. Its operator can access configured targets, incident history, registered push tokens and connection metadata. The monitor does not receive SSH passwords or private keys.

Monitor state is stored as permission-restricted JSON; it is not encrypted by the monitor application. Disk encryption, backups and retention are the operator's responsibility. Apple Push Notification service receives the device token and alert payload, which can include target names and status. Notifications are not end-to-end encrypted by ServerPilot and may appear on your lock screen.

Disconnect in Alerts settings to request device unregistration and remove the local API token. The monitor must be reachable for that request. This does not erase its incident history; contact its operator for deletion. Push delivery requires a configured monitor and publisher-managed Apple credentials.

Sharing and control

There are no advertising or tracking SDKs in this app. Server details are not automatically uploaded to CodeKits. Using Share exports the selected report to the recipient you choose. Clipboard paste happens only when you request it; remote terminal clipboard requests are disabled.

Remove saved servers before uninstalling if you want their Keychain items deleted: uninstalling alone is not a reliable Keychain erasure method. This app cannot erase server-side logs, exported files or existing backups.

Privacy and support: [email protected]. Never send passwords, private keys, API tokens or unredacted production logs in a support request. Opening a CodeKits website is governed by that website's separate privacy policy.

Support, website visits and contact

The app is published by Jonathan Newman through CodeKits.shop. If you email us for help, we receive your email address and the information you choose to send. We use that correspondence to respond, troubleshoot and handle privacy requests; it is accessible to the people and email providers needed to handle your request. Contact [email protected] to request access, correction or deletion of support information. Records may need to be kept for unresolved requests or applicable legal obligations.

This policy describes the current iOS app and optional monitor integration; it does not promise an automatically provisioned CodeKits-hosted monitoring service. Check the privacy and retention terms of the monitor operator you select.

Visiting these CodeKits web pages is separate from using direct SSH. Website traffic and security processing are described in the CodeKits website privacy policy. Changes to app or service data handling will be reflected on this page.