Data we do not collect

The app does not send the following data to the Astra Shell developer:

• SSH private keys, passwords, or biometric information;
• terminal commands, terminal output, or clipboard content;
• remote directories, file contents, or file-transfer records;
• advertising identifiers, usage analytics, crash analytics, or tracking data.

Data stored on your device

Host addresses, ports, usernames, host fingerprints, interface preferences, and recent state are stored on your device. To provide file previews and restoration, the app may temporarily store copies of remote files in a system-assigned cache. You can remove this data by uninstalling the app or using system storage management.

iCloud Keychain and private-key authorization

When system conditions allow, host configurations and SSH private keys can sync between your Apple devices through Apple's iCloud Keychain. Under normal conditions, Astra Shell asks Touch ID, Face ID, or the device passcode for authorization before reading a private key.

If an iPhone or iPad has no device passcode and iOS or iPadOS reports that owner authentication is unavailable for that reason, Astra Shell cannot perform a user-presence check. In this specific condition only, it reads the private key from the Keychain while the device is unlocked. This is a reduced-protection mode; setting a device passcode restores owner authentication. Other authentication failures remain closed and do not unlock the key.

The Astra Shell developer cannot access your iCloud Keychain content. Apple's handling of iCloud Keychain is governed by Apple's terms and privacy policy.

Communication with remote hosts

When you connect, the app sends authentication material, terminal input, and file requests directly to the Astra or SSH host you configured, and receives terminal state and file content from that host. A remote host is controlled by you or a provider you trust; its logging, accounts, and retention practices are outside this policy.

Technical support

If you choose to send a support email, we receive your email address and the information you choose to include, and use it only to diagnose and respond to your request. Do not send private keys, passwords, complete host addresses, or unredacted terminal and file content.

Children's privacy and policy changes

Astra Shell is intended for developers and technical users who manage their own remote hosts and is not directed to children. If product features or data practices change, we will update this page and the date above.

我们不收集的内容

应用不会把下列内容发送给 Astra Shell 开发者：

• SSH 私钥、密码或生物识别信息；
• 终端命令、终端输出或剪贴板内容；
• 远程主机中的目录、文件内容或文件传输记录；
• 广告标识符、使用分析、崩溃分析或用于跟踪的数据。

设备上的数据

Host 地址、端口、用户名、主机指纹、界面偏好和最近使用状态保存在你的设备上。为提供文件预览和恢复体验，应用可能在系统分配的缓存目录中临时保存远程文件副本；你可以通过卸载应用或系统存储管理清除这些数据。

iCloud Keychain 与私钥授权

当系统条件允许时，Host 配置和 SSH 私钥可通过 Apple 的 iCloud Keychain 在你的 Apple 设备间同步。正常情况下，Astra Shell 会在读取私钥前请求 Touch ID、Face ID 或设备密码授权。

如果 iPhone 或 iPad 没有设置设备密码，且 iOS 或 iPadOS 明确因此报告无法进行设备所有者认证，Astra Shell 将无法执行用户在场验证。仅在这一特定条件下，应用会在设备处于解锁状态时从 Keychain 读取私钥。这是安全保护降低的模式；设置设备密码后即可恢复设备所有者认证。其他认证失败仍保持拒绝，不会解锁私钥。

Astra Shell 开发者无法访问你的 iCloud Keychain 内容；iCloud Keychain 的处理方式受 Apple 的条款与隐私政策约束。

与远程主机的通信

连接时，应用会把你主动输入的认证信息、终端输入和文件请求直接发送到你配置的 Astra 或 SSH 主机，并接收该主机返回的终端状态与文件内容。远程主机由你或你信任的服务提供方控制，其日志、账户和数据保留方式不由本政策决定。

技术支持

如果你主动发送支持邮件，我们会收到你的邮箱地址以及你选择提供的信息，并仅将其用于诊断问题和回复请求。请勿发送私钥、密码、完整 Host 地址或未经遮盖的终端与文件内容。

儿童隐私与政策变更

Astra Shell 面向管理自己远程主机的开发者和技术用户，不以儿童为目标。若产品能力或数据处理方式发生变化，我们会更新本页面并修改顶部日期。