SuperDuper Terminal: privacy policy
Last updated November 2, 2026. Checked against the app's code on that date.
The short version
No account and no server of ours in the SSH path. Keys and server details are kept in the Keychain and sync through iCloud Keychain to your other Apple devices. The current code also sends an anonymous launch count to our own server.
- Account: none. The app has no sign-in and no account.
- What reaches us: An anonymous launch count: the event "app launched", the app version, a timestamp and a random install id (see Analytics). Added in version 1.0.1.
- Selling or sharing data: never. No advertising, no ad identifiers, no data brokers.
What the app sends to us
- An anonymous launch count: the event "app launched", the app version, a timestamp and a random install id (see Analytics). Added in version 1.0.1.
What stays on your device
- Terminal output (not written to disk)
- Passwords typed at connect time (not stored)
- Settings (font size, default port/user, toggles) in UserDefaults
Other services the app connects to
Each of these receives only what is listed, plus the IP address any network request carries. Services run by others handle it under their own privacy policies.
| Service | What it receives | When |
|---|---|---|
Your SSH servers | SSH traffic, encrypted by the SSH protocol | When you connect |
Apple iCloud Keychain | Private keys, server list and key list as synchronizable Keychain items (end-to-end encrypted by Apple, never to us) | Whenever iCloud Keychain is on for the Apple ID |
deb.nodesource.com, claude.ai, get.docker.com, astral.sh, bun.sh | Nothing from the phone. These are fetched by your server when you run the optional provisioning helper. | Only if you run provisioning |
Permissions
iOS asks you before the app can use any of these, and you can change your answer in Settings at any time. The app keeps working without them, minus the feature that needs it.
- Face ID: Optional: 'Require Biometrics for Keys' and 'Lock Screen on Launch' settings, both off by default
- Local network: Not declared in project.yml; connecting to a LAN host may trigger the system prompt. Unverified.
Analytics and crash reports
The app counts its own use with our self-hosted, open-source counter at analytics.superduperai.co (superduper-analytics). Each event carries its name (for example "app launched"), the app version, a timestamp and a random id created on first launch. That id lives only in the app, is deleted with it, and is not the advertising identifier or tied to any account. The server keeps the country Cloudflare reports for the request and does not store your IP address. No third-party analytics, no tracking across apps or websites.
No crash reporter in the app. If you chose to share analytics with app developers in iOS Settings, Apple sends us anonymous crash logs; you can turn that off under Settings > Privacy & Security > Analytics & Improvements.
Sync and backup
iCloud Keychain: private keys, server list and key list are saved with kSecAttrSynchronizable=true, so they sync to devices on the same Apple ID and survive app reinstall. A Face ID protected copy is kept on this device only when biometrics are on.
Children
The app is for a general audience. It asks no one, children included, for a name, email, age or any other personal detail.
Deleting your data
Your servers and SSH keys are stored in the iOS Keychain with iCloud Keychain sync, so they reach your other Apple devices through Apple (never through us) and survive deleting and reinstalling the app. To remove them, delete each server and key inside the app before deleting it, or remove them from iCloud Keychain. The random counter id is deleted with the app. We hold no account or profile of you, so there is nothing on our side to export or erase; if you think we hold something, write to us.
Who we are, and how to reach us
SuperDuper Terminal is made by SuperDuperAI and published on the App Store under the developer account of its founder, Rustam Salavatov. The company behind the brand is SuperDuperAI, Corp., a Delaware public benefit corporation, 1207 Delaware Ave #4241, Wilmington, DE 19806, USA (details on about). Questions about this policy or about your data: [email protected]. Help with the app: SuperDuper Terminal support.
If the app starts handling data differently, this page changes first and the date above moves. The policy for the website itself is here.