Privacy Policy

SshSync for Android
Application ID: net.swmud.trog.sshsync
Developer: Trogious  ·  Contact: sshsync@swmud.net
Effective date: 6 September 2026

1. What the app does

SshSync synchronizes media files from one or more SSH servers to your Android device. You provide the connection details for each server (address, port, username and the path to an SSH private key file on your device); the app then periodically connects to those servers, lists the available files and downloads the ones you don't have yet. The developer plays no part in this: there is no intermediary service, no account and no registration — the app is purely a client for servers under your own control.

2. Information the app handles

The app handles only the following information, all of it on your device:

• Your server settings. The addresses, ports, usernames, private-key file paths and optional allowed-network settings of the SSH servers you configure. These are stored on your device in encrypted app storage and are never transmitted anywhere except to the respective server itself when connecting to it.
• Your SSH private key. The app reads a key file that you place on your device and uses it locally to authenticate to your servers. Standard SSH public-key authentication never sends the private key over the network, and the app never copies or transmits it anywhere.
• File catalog and download history. The names, sizes and checksums of the files your servers offer, and a record of which files have been downloaded, kept in a local database so syncing can resume where it left off.
• The downloaded files themselves, saved to the folder on your device that you choose.
• Media previews and playback lengths. After a download the app reads the file on your device to extract a single preview image and its duration, which it keeps in the app's private cache and database so lists can show them. This happens entirely on the device; nothing is sent anywhere.
• Download-history export files. If you choose Export download history, the app writes a file to a location you pick containing the names, remote directory paths, sizes, checksums, download dates and durations of your downloaded files, so you can import it on another device or installation. The app creates this file only at your request, saves it only where you choose and never transmits it. Whatever you then do with that file is up to you.
• Your purchase status. In the Google Play version, whether this installation has the Pro or Supporter unlock (see section 4). Stored on the device in encrypted app storage. The version distributed on GitHub has Pro included and contains no purchase code.
• Your local network address. If you restrict a server to a specific network (e.g. "home Wi-Fi only"), the app reads the device's current Wi-Fi address to decide whether syncing is allowed. This check happens entirely on the device; the address is displayed to you in the app and is not stored or transmitted.
• A local diagnostic log. A small technical log file in the app's private storage, kept only on the device to help you troubleshoot. It is never uploaded.

The app does not request, access, collect or store anything else. In particular it has no access to and makes no use of your name, email address, contacts, location, photos, messages, device identifiers, or usage and diagnostics data.

3. Data collection and sharing: none

• The developer operates no servers that the app talks to and receives no data from the app. The only time the developer ever receives anything from you is when you yourself send an email (for example to be listed as a supporter, section 5).
• The app contains no third-party analytics, advertising, crash-reporting or tracking SDKs.
• The app's network communication consists of: SSH connections directly between your device and the servers you configured, to list and download your files; in the Google Play version, the Google Play Billing library talking to Google Play on your device when you view or buy the Pro unlock (section 4); and, only when you open the Pro screen, one download of the public supporters file (section 5). No data is sold or shared with any third party.

4. In-app purchases (Google Play version only)

The Google Play version offers an optional one-time purchase that unlocks Pro features, and a Supporter variant of it. Purchases are made through Google Play and are processed entirely by Google under Google's Privacy Policy. The developer never receives your name, email address, payment details or any other account information from a purchase.

• Google Play tells the app on your device whether your Google account owns the unlock, and gives it a purchase token and an order number. The app uses these on the device to record the resulting status (Free, Pro or Supporter) in encrypted app storage and to confirm the purchase to Google Play. It does not send them anywhere.
• The app re-checks purchase ownership with Google Play on your device when it starts and when you open the Pro screen, so a refund or a change of Google account is reflected in the app. Prices shown in the app are fetched from Google Play at that time.
• The order number is included in the supporters email described in section 5 only if you choose to send that email.
• Refunds are handled by Google Play under its refund policy. The developer cannot see who bought or who was refunded, only anonymous counts in the Google Play Console.

5. Supporters list

Buyers of the Supporter unlock may, if they wish, have a name of their choosing shown on the app's Pro screen as a thank-you. This is entirely optional and works as follows.

• What the app downloads. When you open the Pro screen, the app fetches a small public text file containing the list of names from file hosting operated for the developer by Amazon Web Services (Amazon S3), at most once per day, and keeps a copy in the app's cache. This request contains no account, purchase or device identifiers — only what any web request carries, namely your device's IP address and a generic app/device description. Amazon may log such requests under its own terms. The file is public and identical for everyone; nothing about you is sent with the request. If you never open the Pro screen, this request never happens.
• How a name gets on the list. Only by your explicit request: a Supporter can tap Add my name, which opens your email app with a message to supporters-sshsync@swmud.net pre-filled with your Google Play order number and the app version, to which you add the name you want shown. You can edit or discard the message before sending. The developer uses the order number to confirm that the purchase exists and has not been refunded.
• What is published. Only the display name you asked for. Your email address, order number and anything else in your message are kept privately by the developer for verification and to act on removal requests, and are never published or shared.
• Removal. Email supporters-sshsync@swmud.net at any time and your name will be removed without questions. The developer may also remove a name whose purchase was refunded. Because the app caches the list for up to a day, removal reaches all devices within about 24 hours. Your private request details are deleted once removal is complete.

6. Your servers

The servers the app connects to are chosen and operated by you (or by whoever you obtained the connection details from), under that operator's own terms. As with any network connection, a server you connect to can see your device's IP address, your username and which files you download. If you connect to a server you do not operate yourself, its operator's privacy practices apply to what happens on that server — the app itself sends servers nothing beyond what the SSH file transfer requires.

7. Data storage, retention and deletion

• All data the app handles lives only on your device and is retained until you change or remove it. The only exceptions are the supporters list request you may choose to send by email (retained as described in section 5) and the records Google Play keeps of a purchase under Google's own policy.
• Your purchase status is stored on the device and is refreshed from Google Play; clearing the app's storage removes the local copy, and the next start restores it from your Google account.
• Server settings are stored encrypted at rest (Android Keystore–backed encryption); the encryption key never leaves your device's secure hardware.
• To delete the app's data: clear the app's storage in Android settings, or uninstall the app. Note that the downloaded media files are yours and live in the folder you chose — if that folder is outside the app's private storage, the files remain after uninstalling until you delete them yourself, and the same applies to a private key file you placed on the device.
• Android's standard backup service may include app data in your device backup, subject to your own device backup settings. Because the server settings are encrypted with a key that is never included in backups, a backup cannot expose them.

8. Security

• All communication with your servers uses the SSH protocol, which encrypts everything in transit — file contents, file listings and authentication.
• Authentication uses SSH key pairs only; the app stores no passwords, and your private key is used only locally and never transmitted.
• Connection settings are encrypted at rest on the device, as described above.

9. Android permissions used

• Internet — to connect to the SSH servers you configured, and, in the Pro screen, to download the public supporters list.
• Google Play billing (com.android.vending.BILLING, Google Play version only) — added by the Google Play Billing library to offer the Pro unlock.
• Network state — to sync only when a connection is available.
• Wi-Fi state / change network state — to read the device's current Wi-Fi network address so that a server restricted to a specific network (e.g. your home LAN) is only synced while you are on it. This check runs entirely on the device.

10. Children

The app is not directed at children under 13 and, as described above, collects no personal information from anyone.

11. Changes to this policy

If the app's data practices ever change, this policy will be updated at this same address with a new effective date before the change takes effect.

12. Contact

For any questions about privacy or this policy, contact the developer at sshsync@swmud.net.