PRIVACY POLICY

Effective TODO · Last updated 2026-05-10

Plain-language summary: We don't read your terminal sessions. We don't run analytics. We don't sell anything to anyone. Apple handles payments. Our server briefly sees public keys and IP addresses when you connect — that's it.

1. Who we are

airshell ("we", "us", "the app") is operated by TODO — legal entity name, based in TODO — city, country. Reach us at support@airshell.org for any privacy question.

2. What this policy covers

airshell is an iOS app that lets you open a shell on your own Mac from anywhere with internet, using a companion app you install on that Mac. This policy covers:

• The airshell iOS app on your iPhone or iPad
• The airshell relay, a server we run at relay.airshell.org
• The airshell macOS companion app

It does not cover:

• Anything inside your terminal session — between your iPhone and Mac only, end-to-end encrypted. We can't read it.
• Third-party services we use (Apple, Fly.io, Cloudflare) — their own policies apply.

3. What we collect

On your iPhone / iPad

Data	Where	Purpose
Your iPhone's Ed25519 signing key	iOS Keychain (biometric-protected)	Proves to the relay that this iPhone is authorized
Your paired Macs' public keys + device tokens	iOS Keychain	Connects you without re-pairing
App settings (font, theme, etc.)	UserDefaults on your device	Remembering preferences

None of this leaves your phone except as described below.

On the airshell relay

When you connect via the relay we briefly see:

• Your iPhone's public Ed25519 signing key
• Your Mac's public key
• Your IP address (standard part of any internet connection)
• Connection timestamps
• A signed proof of pairing

What the relay never sees:

• The contents of your terminal session. End-to-end encrypted between your devices.
• Your Apple ID, name, email, or any personal identifier.
• Files on your Mac. The relay is a pipe for encrypted bytes only.

4. What we do not collect

• No analytics. No Firebase, Mixpanel, Amplitude, or any analytics SDK.
• No crash reports collected by us. Apple's standard crash reporting (if you've opted in) sends to Apple.
• No advertising identifiers. No IDFA.
• No location.
• No contacts, photos, calendar, or personal data.
• No keyloggers, screenshots, or recording.

5. Retention

Data	Retention
Relay connection metadata	TODO — recommended 30 days, then auto-deleted
Device pubkeys in authorized-peers	Until you unpair
App data on iPhone	Until you delete the app
Apple subscription receipts	Apple keeps these — we don't store payment data

6. Service providers

• Apple — handles all subscription billing via StoreKit. Policy.
• Fly.io — hosts the relay. Sees only TLS-encrypted bytes. Policy.
• Cloudflare — DNS + TLS proxy in front of the relay. Sees only TLS-encrypted bytes. Policy.

We do not sell, rent, or share your data with advertisers, brokers, or marketers.

7. Encryption

• X25519 key exchange (Curve25519 Diffie-Hellman)
• ChaCha20-Poly1305 stream cipher (NaCl secretbox)
• Forward secrecy via per-session key regeneration
• Pubkey pinning at pair time — Mac's key never accepted from the wire

The airshell relay cannot decrypt your terminal sessions.

8. Subscriptions and payments

airshell offers an auto-renewing subscription ("Airshell Pro") with a free trial period administered by Apple.

• Payment is collected by Apple, not us.
• We receive only an entitlement (yes/no) from StoreKit.
• Manage in iOS Settings → Apple ID → Subscriptions.
• Apple handles refunds via reportaproblem.apple.com.

9. Children

airshell is not directed at children under 13. If you believe a child under 13 has used the app, contact us and we'll delete any associated data.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or object to processing of your data. To exercise any of these, email support@airshell.org. We'll respond within 30 days.

California residents (CCPA): same rights. We do not sell personal information.

EU/UK residents (GDPR): legal basis is performance of contract + legitimate interest (security).

11. Legal disclosure

We may disclose data if compelled by valid legal process. Given how little we collect, this in practice means: a pubkey, a timestamp, an IP. We have nothing else.

12. Changes

Material changes are posted at this URL with an updated date.

13. Contact

support@airshell.org

---

This policy is a public commitment to the practices described above. If you believe airshell is not behaving consistent with this policy, please email us so we can fix it.