Privacy Policy

CloudEx Inc. ("we", "us", or "our") operates the "SSH Client Pro" app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you. By using the Service, you are deemed to have agreed to the practices described in this Policy.

1. Our Core Principle

SSH Client Pro is an SSH (and telnet) client and terminal for Android. It connects directly from your device to the servers you add — or, if you configure one, through a jump host of your choice. There is no account, no sign-in and no cloud sync, and your sessions never pass through our servers. Specifically, we never receive, record or store:

  • Your hosts, user names, passwords, private keys or key passphrases
  • The commands you type or the output your servers return
  • Files you transfer with SFTP, or traffic that passes through port forwarding

2. Your Connections and Terminal Data

  • Terminal traffic: What you type, what your servers return, SFTP file transfers and port-forwarded traffic travel only between your device and your servers, over the encrypted SSH connection. If you choose telnet for a host, that connection is not encrypted, as is inherent to the telnet protocol. The app does not record or upload any of this traffic.
  • Session logs: A session log is written only when you choose "Save log", and it is saved to the location you pick.
  • Backups: An encrypted backup file is created only when you export one. It is protected with a passphrase you choose (PBKDF2 + AES-GCM) and saved to the location you pick. Importing a backup reads only the file you pick.

The servers you connect to, including any jump host, are operated by you or by the parties you choose to connect to. How those servers handle data is governed by their operators.

3. Information We Collect

3.1 Information Collected Automatically

  • Crash reports: Via Firebase Crashlytics. When the app crashes, we collect the stack trace, device model, OS version and app version. Reports of internal errors in the terminal emulator are also sent. These reports never include your hosts, credentials, keys, commands or terminal output.
  • App usage statistics: Via Google Analytics for Firebase. The SDK automatically collects app usage events (such as the first open and the start of a session) together with device information, an app-instance identifier, the device's advertising ID where available, and an approximate location (such as the country or city) that Google Analytics derives from the IP address. The app does not use GPS and does not request location permission. We use this data only to understand aggregate usage and to improve the app. The app sends no custom events containing your data.
  • Purchase information: Premium is an optional one-time in-app purchase through Google Play Billing (product "pro_unlock"). Ownership is checked on your device through Google Play. We never receive payment details such as credit card numbers.
  • Google Play services: Used to show the in-app review prompt and to check for app updates.

3.2 The "Our other apps" List

The "Our other apps" list in Settings downloads a list (JSON and images) from our server, which is hosted on Cloudflare Pages. No personal information is sent with this request. Your device's language and SIM country are used on your device only to decide which apps to show, and the app checks on your device whether our other apps are already installed so that they can be left out of the list; neither is sent anywhere. Store links opened from this list include referral parameters.

3.3 Information Stored Only on Your Device

  • Connection data: Hosts, user names, passwords, private keys, key passphrases, snippets, trusted host keys (known hosts) and port-forward settings are stored only in a file inside the app's private storage on your device.
  • Encryption: Passwords, private keys and passphrases are encrypted (AES-GCM) with a key held in the Android Keystore.
  • Excluded from cloud backup: This file is excluded from Android's automatic cloud backup.

None of this information is sent to us or to any third party.

3.4 Only When You Take an Action

  • Voice input: Uses your device's speech recognizer. The recognition is handled by that service.
  • Contacting us: The contact button opens your email app with the app version, Android version and device model pre-filled. This information is sent only if you send the email.
  • Links: Links in terminal output open in your browser.
  • Sharing a public key: Uses Android's share sheet; the key goes only where you choose to send it.

3.5 Information We Explicitly Do Not Collect

  • Precise location (GPS)
  • Contacts or phone number
  • Photos or other media
  • Camera images or microphone recordings
  • The contents of other apps

3.6 Permissions the App Requests and Their Purposes

  • Internet — To connect to your servers.
  • Network state — To reconnect when the network comes back.
  • Foreground service and notifications — To keep your sessions alive in the background, with a "Disconnect all" button in the notification.
  • Wake lock — To keep connections alive while the screen is off. You can turn this off in the settings.
  • Vibrate — To signal the terminal bell with a vibration.
  • Biometric — For the optional app lock.
  • Billing — For the Premium purchase.
  • Advertising ID — Declared by the Google Analytics for Firebase SDK (see Section 3.1).

4. How We Use Information

The limited information we collect is used only for the following purposes:

  • Operating and maintaining the Service
  • Verifying Premium purchases
  • Understanding aggregate app usage and improving the app
  • Diagnosing and fixing crashes and errors
  • Responding to support inquiries
  • Complying with applicable laws

5. Third-Party Services

SSH Client Pro uses the following third-party services. Each service has its own privacy policy.

  • Firebase Crashlytics (Google LLC) — crash reports
  • Google Analytics for Firebase (Google LLC) — app usage statistics
  • Google Play Billing (Google LLC) — the Premium purchase; payment is completed on Google Play
  • Google Play services (Google LLC) — in-app review prompt and in-app update check
  • Cloudflare Pages (Cloudflare, Inc.) — hosting of the "Our other apps" list

We do not sell your information, and we do not share it with advertising networks.

6. Data Retention

  • Crash reports: retained for 90 days, then deleted.
  • Analytics data: retained by Google Analytics for up to 14 months, then deleted.
  • Data stored on your device: kept until you delete it, uninstall the app or clear the app's data.

7. International Data Transfers

We are based in Japan. The Google infrastructure used for crash reports and analytics may be located in various countries, so the minimal information described above may be processed outside your country of residence.

8. Your Rights

Depending on where you reside (e.g., the EEA, UK, California, Japan), you may have the right to request access to, correction of, or deletion of the limited information we hold. You can:

  • Contact us at the address below to request access, correction or deletion
  • Reset your device's advertising ID in your device settings (for example, Settings → Google → Ads)
  • Uninstall the app or clear the app's data to erase everything stored on your device

9. Children's Privacy

SSH Client Pro is not directed to children under the age of 13 (or the minimum age applicable in your region). If we learn that we have inadvertently collected information from such a child, we will delete it promptly upon being contacted.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version is always published at this URL together with its effective date. The privacy policy screen in the app loads this page (https://sshclientpro.cloud-ex.biz/privacy/); if it cannot be loaded, a copy bundled with the app is shown instead.

11. Contact

For questions about privacy, data requests, or to report concerns, please email us at .

CloudEx Inc. (Japan)

Effective Date: September 29, 2026