Privacy Policy

Our Philosophy

GateShell is built by Hefty Innovations on the belief that your server credentials and terminal sessions are among the most sensitive data you own. We designed GateShell so that we cannot access any of it — not because of a policy, but because there is nothing for us to access. GateShell has no backend servers, no analytics, no telemetry, and no user accounts.

Data We Collect

Nothing.

GateShell does not collect, transmit, or store any personal information, usage data, crash logs, or analytics. We do not know who uses GateShell, how often they use it, or which servers they connect to. There are no third-party analytics SDKs, no tracking frameworks, and no advertising identifiers in the app.

Where Your Data Lives

• Server configurations (hostnames, ports, usernames) are stored on-device using Apple SwiftData and optionally synced across your devices via iCloud private database. iCloud uses end-to-end encryption; not even Apple can read your synced data.
• Passwords and SSH private keys are stored exclusively in the Apple Keychain, which is hardware-encrypted and isolated from other apps. Keychain items may sync via iCloud Keychain with the same end-to-end encryption guarantees.
• Terminal session logs (if you enable recording) are saved on-device in the GateShell app container. They never leave your device unless you explicitly export them.
• Biometric data (Face ID / Touch ID)is processed entirely on-device by Apple's Secure Enclave. GateShell only receives a yes/no response from the system — it never sees raw biometric data.

Purchases & Subscriptions

GateShell Pro subscriptions are processed entirely by Apple via StoreKit. We do not receive or store your credit card details, billing address, or payment history. Apple provides us only with an anonymized transaction identifier and subscription status necessary to unlock Pro features. Apple's privacy policy governs all payment processing.

SSH Connections

All SSH, SFTP, and port forwarding connections are established directly from your device to your server. GateShell operates no relay servers, proxy servers, or middleboxes. We cannot observe, intercept, or log your network traffic. Your connection is encrypted end-to-end by the SSH protocol between you and your server.

Children's Privacy

GateShell is not directed at children under the age of 13, and we do not knowingly collect any information from anyone — including children — as the app collects no data.

Changes to This Policy

If we make material changes to this privacy policy, we will update the date above and note the change. Because GateShell has no backend and no user accounts, we cannot push in-app notifications — please check this page periodically.

Contact

If you have questions about this privacy policy, contact us at support@heftyinnovations.com.

Hefty Innovations — GateShell is a product of Hefty Innovations.