Firebrik Terminal ("the app") is an SSH terminal for your own Herdr session. This policy explains what the app does with information. The developer does not receive your terminal content, attachments or synced server data. The app talks to the servers you configure and, only if you sign in with Google to sync your server list, to your own Google Drive.
What the app stores on your device
-
Pane bookmarks: optional local bookmark names and server/pane/workspace/tab/terminal identifiers. They are not synced or backed up. Names and locations follow the pane; bookmarks are removed when your connected server confirms their panes were deleted. Removing a bookmark keeps the running pane open; uninstalling removes local bookmarks.
-
Pane icon preferences: optional agent-icon choices associated with server and session identifiers, stored only on this device. They are not synced or backed up and do not change the agent running on your server.
-
Saved servers: the name, host, port, username and start-up command you enter for each server, whether it connects when the app opens, when you last edited it, and when you deleted servers (so a deletion is not undone by syncing).
-
SSH key: a key pair created in the Android KeyStore. The app protects the private key using Android KeyStore.
-
Pinned host keys: the SSH host key of each server you connected to, used to detect a changed server.
-
Google account: if you sign in to sync, the email address of the account you chose, to show it and to ask Google for access to the synced copy, and that account's profile picture (its address, and a copy of the image so it shows offline), shown on the account card. The picture is downloaded from Google and never sent anywhere; signing out deletes it.
-
Preferences: theme, terminal colours, text size and whether the Agents navigation tab is shown.
-
Local conversations: recent prompts and shell commands accepted by your server, message drafts, the latest terminal output you viewed, timestamps, ANSI color/style information for that output and agent/workspace/session identifiers. Retention is bounded, so older records can be removed as new ones are saved. Conversations are never synced. Settings → Clear local drafts and history removes every saved local conversation after confirmation. This does not stop an agent or remove servers, the Google account or SSH keys. The mobile pane displays live SSH terminal output; older saved output remains until cleared. Recent-pane navigation history is also kept locally and is not synced.
This data stays on the device unless you sign in to sync (below). It is excluded from Android cloud
backups and device-to-device transfers, and it is deleted when you uninstall the app. Deleting a
server in the app removes its saved details; its pinned host key stays (other saved servers may use
the same host) until you use Forget pinned host key or uninstall the app. Two small markers are
kept so that syncing cannot undo what you did: for each deleted server, its internal id and when it
was deleted; for each forgotten host key, the server's address (host:port) and when it was
forgotten.
Optional: syncing your servers with your Google account
Signing in is optional; the app works fully without it. If you tap Sign in with Google, you
choose a Google account and allow the app to use its own hidden app-data folder in that account's
Google Drive (the drive.appdata permission: the app cannot see or change any of your other files).
- What is synced: your saved servers (name, host, port, username, start-up command, connect when the app opens, edit times), the pinned host keys (the servers' public keys) and the markers above (deleted server ids and forgotten host addresses, with their times). They are kept as one file in that hidden folder, so every device signed in to the same account shows the same servers.
- What is never synced: your SSH private key (it cannot leave the device), any password, and your preferences, bookmarks, pane icon choices or local conversations. Each device has its own key; the first time a device connects to a server that does not know it yet, the app offers to add that device's key.
- Who can read it: the file is stored by Google in your Google account, under Google's privacy policy and terms. It travels encrypted (HTTPS) between your device and Google. The developer has no server and no access to your Google account or to the file.
- Deleting it: Servers → Delete synced data deletes the file from your Drive and withdraws the app's access to your account; servers stay saved on each device. You can also remove the app's access at myaccount.google.com/permissions and its hidden data in Google Drive under Settings → Manage apps.
- Signing out on a device stops syncing there; its servers stay on it.
What the app sends, and to whom
- The app opens an encrypted SSH connection only to a server you configure, one server at a time: the one you choose in the app. Over it, it shows your terminal, reads your Herdr session's state (workspaces, tabs, panes, agent status and recent pane text) and sends the keys, answers and prompts you type or tap.
- If you use Install key or Add key, your SSH password is sent once, over SSH, to that same
server to add the device's public key to
~/.ssh/authorized_keys. The password is not stored. - If you signed in to sync, the synced file goes to and from your Google Drive over HTTPS, as above.
- Nothing is sent to the developer. The app contains no analytics, advertising, crash-reporting or tracking code.
File attachments
If you choose Attach, Android's document picker lets you select files to send to the server
connected to your current pane. The app streams the files through the existing encrypted SSH
connection using SFTP, into ~/.firebrik-uploads/<unique-id>/<safe-name> on that server. You can
select up to 10 files, with a limit of 50 MiB per file. Upload folders are private (0700), and files
use permissions 0600. Incomplete uploads are removed on cancellation or failure when the connection
allows cleanup.
The app does not keep an additional local attachment copy or persistent document-picker grants, and attachments are not synced through Google Drive or sent to the developer. Completed uploads remain on your server until you remove them there; clearing local history or uninstalling the app does not delete uploaded server files. Inserting an uploaded path into a pane does not press Enter or automatically submit an agent command. An agent or process on your server can read a file if its server permissions allow it; that software's own data practices apply.
Keyboard and voice input
Swipe typing, suggestions, autocorrect and keyboard dictation are provided by the Android keyboard or speech-recognition service you use. That provider's privacy policy applies to information it processes, including any audio used for dictation. The app does not record audio. In the direct terminal view, committed text is sent to your connected SSH server as keyboard input; Return is an explicit action. Older prompt composers, where available, send their text when you tap Send.
Clipboard and links
Long-press selection lets you explicitly copy terminal text to Android's clipboard. The app does not copy automatically or sync clipboard content. Android controls clipboard access and retention. Tapping an HTTP or HTTPS link passes that selected URL to your default browser; the browser and visited website apply their own privacy policies.
Notifications
Notifications about agents waiting for you show the agent's name, the workspace and the last lines of that agent's screen. They are created on the device from data received from the connected server. You can turn them off in Android's notification settings.
Permissions
| Permission | Why |
|---|---|
| Internet, network state | Connect to your SSH servers, reconnect when the network changes and, if you signed in, sync with your Google Drive. |
| Notifications | Tell you when an agent is waiting or finished. |
| Foreground service (connected device) | Keep the SSH connection to the server you chose open while the app is in the background, so notifications keep working. |
Children
The app is a developer tool and is not directed at children.
Changes
If this policy changes, the new version will be published at the same address with a new effective date.