Privacy Policy: Bash Board

Bash Board is designed so that your SSH credentials, servers, macros, and command logs stay on your device. We do not run a Bash Board cloud account for storing your macros or secrets.

The App connects to:

1. SSH hosts you configure, to run the commands you define
2. Apple App Store / Google Play, for purchases and subscription entitlement

Depending on how you use Bash Board, the App may store locally:

Encryption

• Android: Credentials and trusted SSH host keys are stored using encrypted preferences backed by the Android Keystore.
• iOS: Credentials are intended to be stored using the system Keychain (or equivalent platform-secure storage) when the iOS app ships.

Metadata such as labels and hostnames is stored in the App’s local database on the device.

To the best of our knowledge for the current Android App (and the planned iOS App with the same design goals), we do not:

• Create a Bash Board user account or profile on our servers
• Upload your SSH passwords, private keys, or macros to SudoCod servers
• Sell your personal information
• Show third-party advertising in the App
• Use the App to run analytics SDKs that profile you for ads (unless this policy is updated and you are notified)

If we add optional analytics, crash reporting, or support tooling later, we will update this policy and describe what is collected and why.

The App requests network access to:

4.1 Your SSH servers

When you tap a macro (or test a connection), the device opens an SSH session to the host you configured and sends the credentials you stored, solely to authenticate and run your command. Those credentials leave the device only for that purpose and only to that destination.

On Android, the App uses trust on first use (TOFU) for SSH host keys: the first successful connection to a host:port pins that server’s host key in encrypted on-device storage. Later connections fail closed if the host key changes (which can indicate a man-in-the-middle attack or an intentional server reinstall/key rotation). You can reset a trusted host key in Server settings after intentional changes. iOS is planned with the same TOFU goals.

You are responsible for:

• Choosing trustworthy hosts
• Securing accounts and keys on those hosts
• Complying with laws and policies that apply to systems you access

4.2 App stores and billing

Subscription purchase, restore, and entitlement checks use:

• Google Play Billing (Android)
• Apple In-App Purchase / StoreKit (iOS, when available)

Apple and Google process payment data under their own privacy policies. We receive entitlement signals (for example, whether a subscription is active), not your full payment card details.

4.3 Network status

The App may check whether the device has a network connection (for billing / entitlement flows). That check does not send your SSH credentials to us.

Bash Board offers Bash Board Pro as a paid auto-renewing subscription via the platform store. On Android, an active Pro entitlement (or a temporary debug unlock in development builds) is required to use macros and servers; otherwise the App shows a paywall.

• Pricing, free-trial length (for example a 14-day trial when offered), and renewal terms are shown in the store listing and/or purchase sheet at the time of purchase.
• The App may cache whether Pro appears entitled so basic offline checks can work; purchase and restore still go through the store.
• Manage or cancel subscriptions in your Google Play or Apple ID subscription settings.
• Deleting the App does not automatically cancel a store subscription.

• Local App data remains on the device until you delete it within the App (for example, deleting a server or macro) or uninstall the App.
• Uninstalling removes App-stored data from that device, subject to normal OS behavior.
• Store subscription records are retained by Apple/Google according to their policies.
• We do not maintain a separate cloud copy of your macros or credentials to “delete on request,” because we do not host that content.

• On Android, application backup of Bash Board data is restricted (allowBackup disabled) to reduce the chance of credentials appearing in cloud device backups. Credentials, host keys, and the local database are excluded from extraction rules.
• On iOS (when available), credentials are intended to use Keychain with no cloud sync of secrets.
• You remain responsible for device lock screens, OS updates, and physical security of the device.
• Anyone with unlocked access to your device may be able to use macros you have configured.

The App is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information through the App in a way that concerns you, contact us so we can help you remove local App data by uninstall guidance.

The App processes data primarily on your device. Store transactions may be processed by Apple or Google in various regions under their terms.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update means you accept the revised policy. Material changes may also be noted in the store listing or in-app notice when appropriate.

For privacy questions about Bash Board:

• Developer: SudoCod
• Product: Bash Board
• Email: privacy@sudocod.com
• Policy (web): https://sudocod.com/products/bash-board/privacy/

If this address is not yet active on your store listing, use the support / developer contact shown on the Google Play or App Store product page.

This document is intended for use with both store listings. When the iOS app ships, any platform-specific differences will be reflected in an updated version of this policy.