LEGAL

Privacy Policy

Affluent Labs ("we", "us", "our") operates the ZestSSH application for Android, iOS, Windows, macOS, and Linux (the "App"). This Privacy Policy explains how we collect, use, and protect your information.

Last updated: August 18, 2026

Information You Provide

  • Connection details: Server hostnames, ports, and labels you configure within the App. These are stored locally on your device.
  • SSH keys and credentials: Authentication credentials you create or import. Passwords and private keys are stored exclusively in your device's secure storage (Keychain on iOS/macOS, EncryptedSharedPreferences/Keystore on Android, DPAPI on Windows, libsecret on Linux) and are never transmitted to our servers.
  • Purchase information: When you purchase ZestSSH Squeezed, payment is processed entirely by our payment providers, Apple App Store or Google Play Store for mobile purchases, and Stripe for web and desktop purchases. We do not collect or store your payment details.

Information Collected Automatically

No tracking, analytics, or crash reporting. ZestSSH has zero tracking, zero analytics, and zero crash reporting. We do not use Firebase Analytics, Crashlytics, or any other telemetry service. We have no idea how you use the app, how often you open it, or what features you use.

  • Purchase verification: On mobile we use RevenueCat to verify in-app purchase entitlements. RevenueCat receives an anonymous app user ID and purchase receipt data from the platform stores; it contains no personal information.
  • Update check: On desktop the App periodically requests a small version file from zestssh.com so it can tell you when a new release is available. This request sends nothing about you or your device, like any web request, our server sees only your IP address and the time. It is skipped on iOS.

Everything else below only ever involves a third party when you choose to use a feature that needs it, signing in for ZestSSH Cloud, or using voice input. If you never sign in and never use voice input, the App transmits nothing about you or your activity to anyone.

Information We Do NOT Collect

  • We do not collect any analytics, usage data, or telemetry of any kind.
  • We do not collect crash reports or diagnostics.
  • We do not collect, log, or transmit your SSH session content, terminal output, or command history.
  • We do not collect your SSH private keys or passwords.
  • We do not read, intercept, or proxy your SSH connections. All connections are made directly from your device to the destination server.
  • We do not sell or share your personal data with third parties for advertising purposes.
  • We do not serve ads of any kind.
  • We do not know who you are, what servers you connect to, or what you do with the app.

Juiced & ZestSSH Cloud (Optional Feature)

If you choose to enable Juiced (a separate paid add-on) and sign in to sync:

  • Account identity: Signing in uses Google Firebase Authentication together with Sign in with Google or Sign in with Apple. Your email address and an account ID are handled by Google/Apple and by Firebase Authentication solely to identify your sync account. We use no other Firebase products, no Firebase Analytics and no Crashlytics.
  • Your connection configurations and encrypted credential references are synced to the sync backend you choose.
  • Sensitive data (passwords, private keys) is encrypted end-to-end on your device before upload, and we cannot decrypt it, the encryption key is derived from your master password and never leaves your device.
  • If you use the hosted ZestSSH Cloud backend (US-based), our server stores only this encrypted blob plus the operational metadata it needs to run the service: your account email/ID, a non-identifying device id (for example windows_a1b2c3d4, never your hostname), the blob size, and timestamps. It never sees your connections, keys, passwords, or commands in readable form. If you instead choose your own WebDAV, S3, or Google Drive, only the encrypted blob is stored there.
  • Profile photo (optional): if you set an account avatar, that image is uploaded to ZestSSH Cloud so it can appear across your devices. You can remove it at any time.
  • You can delete all synced data at any time from the App settings.

Data Storage and Security

  • All connection data and credentials are stored locally on your device by default.
  • Sensitive credentials use platform-native secure storage (iOS/macOS Keychain, Android Keystore, Windows DPAPI, Linux libsecret).
  • The local database is encrypted with SQLCipher using a key held in secure storage, and is stored in the App's private directory.
  • Local backups (.zest files) are encrypted with AES-256-GCM using a password you choose (minimum 12 characters). Backup files never leave your device unless you manually export them.
  • Automation Engine API keys are stored in the same platform-native secure storage as SSH credentials. They are never transmitted to our servers.

Voice Input (Optional)

The terminal offers optional voice-to-text dictation. When you tap the microphone, your speech is transcribed by your device's operating-system speech recognizer (Apple Speech on iOS/macOS, or the Android system recognizer, which on some devices routes to Google). That audio is handled by the platform vendor, not by us, we never receive it, and the microphone is only active while you are actively dictating.

Third-Party Services

  • RevenueCat for in-app purchase verification only (mobile). Privacy Policy
  • Apple App Store / Google Play Store for payment processing on mobile.
  • Stripe for payment processing on web and desktop purchases. Privacy Policy
  • Google Firebase Authentication, Sign in with Google, and Sign in with Apple, only if you sign in for ZestSSH Cloud, to identify your sync account. Authentication only; no Firebase Analytics or Crashlytics. Privacy Policy
  • Cloudflare for CDN and proxy services on our website and ZestSSH Cloud infrastructure. Privacy Policy

That's the complete list. No analytics providers, no ad networks, no data brokers, no tracking pixels.

Children's Privacy

ZestSSH is not intended for use by children under 13. We do not knowingly collect personal information from children.

Your Rights

  • Delete all locally stored data by uninstalling the App.
  • Delete Juiced data from the App settings (if enabled).
  • Contact us to request deletion of any data associated with your account.
  • There are no analytics to opt out of, we don't collect any.

GDPR & CCPA Compliance

We comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the right to access, correct, or delete your personal data. Since we collect no analytics or telemetry, there is very little data to manage. To exercise your rights, contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. For material changes we will show a notice inside the App the next time you open it, in addition to updating the "Last updated" date at the top of this page. Continued use of the App after a material change takes effect constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, contact us at:

Affluent Labs
Email: [email protected]