适用范围

本政策适用于 Hermit Lab 开发和维护的 TermDesk macOS、iOS 与 iPadOS App，以及本支持网站。TermDesk 是通用 SSH 客户端与远程服务器工作台；用户只能连接自己拥有或获授权访问的服务器。

开发者收集的数据

TermDesk 不通过开发者运营的服务器收集你的服务器配置、SSH 凭据、终端输出、远程文件、诊断内容或使用行为。

• 不包含广告 SDK。
• 不进行跨 App 或跨网站追踪。
• 不集成第三方分析或崩溃收集服务。
• 不要求注册 TermDesk 账号。

设备上的数据

TermDesk 可能在当前设备保存服务器名称、地址、端口、用户名、分组、标签、备注、快捷命令、跳板机、端口转发和 Web 工作区规则，以及主机指纹、传输队列、缓存和界面设置。

手动保存的密码、私钥正文和口令存储于 Apple Keychain；连接时询问的凭据仅保留在本次运行内存中。配置备份和默认诊断包不包含密码、私钥正文或口令。

Apple 服务

CloudKit

配置同步默认关闭。只有你明确开启后，安全白名单内的配置才会写入你 Apple ID 对应的私有 CloudKit 数据库。主机指纹、传输队列、运行状态、密码、私钥正文和口令不会写入 CloudKit 配置记录。

iCloud Keychain

凭据同步是独立选择。只有你明确选择 iCloud Keychain 后，对应密码、私钥或口令才会通过 Apple 的 iCloud Keychain 同步。

App Store 与 StoreKit

Apple 处理 TermDesk Pro 的购买、退款和恢复。TermDesk 读取商品信息与经过验证的权益结果，但不会取得或保存银行卡号等支付凭据。设备可在非同步 Keychain 中保存有限的权益证明，以支持短时离线验证。

你连接的远程服务器

TermDesk 按你的指示连接你配置的 SSH 服务器。SSH、SFTP、端口转发和 Web 工作区的数据直接在你的设备与目标服务器之间传输，不会经过 Hermit Lab 的服务器。

远程服务器的运营者可能按照其自身政策处理连接日志、IP 地址和远程内容；这些行为由你与服务器运营者之间的关系决定，不受本政策控制。

支持邮件和本网站

本网站不设置 Cookie，不加载第三方统计、广告或追踪脚本。网站服务器可能为安全和运行维护保留常规访问日志，例如时间、请求路径、状态码、IP 地址和浏览器标识；日志仅用于安全、防滥用和故障排查，并按运行需要有限保留。

如果你主动发送支持邮件，我们会收到邮件地址、邮件内容和你选择提供的附件，仅用于处理和回复该请求。请勿发送密码、私钥、口令、完整服务器地址、终端内容或远程文件。

数据删除与保留

TermDesk 没有开发者运营的用户账号，因此不存在由开发者持有的账号资料。你可以在 App 内删除服务器、私钥引用和配置；本机文件、Keychain、iCloud Keychain 与 CloudKit 是独立的数据域，需要分别清理。删除 App 或本机 Application Support 文件不会自动删除 Keychain 或 CloudKit 数据。

支持邮件按处理请求和履行必要义务所需时间保留。网站安全日志按安全和运行需要有限保留。

儿童、变更与安全

TermDesk 面向管理远程服务器的用户，并非专门面向儿童。我们不会故意收集儿童个人信息。

我们采取合理措施保护本网站和支持通信，但任何网络传输或存储都无法保证绝对安全。政策发生重要变化时，本页面会更新生效日期。

联系我们

隐私或支持问题请联系：support@hermit-lab.com

开发者：Hermit Lab
产品：TermDesk

Scope

This policy applies to the TermDesk apps for macOS, iOS, and iPadOS developed and maintained by Hermit Lab, as well as this support website. TermDesk is a general-purpose SSH client and remote server workspace. Users must connect only to servers they own or are authorized to access.

Data collected by the developer

TermDesk does not use developer-operated servers to collect your server profiles, SSH credentials, terminal output, remote files, diagnostic contents, or usage behavior.

• No advertising SDKs.
• No cross-app or cross-site tracking.
• No third-party analytics or crash-collection services.
• No TermDesk account registration.

Data on your device

TermDesk may store server names, addresses, ports, usernames, groups, tags, notes, quick commands, jump-host settings, port-forwarding rules, Web-workspace rules, host fingerprints, transfer queues, caches, and interface preferences on the current device.

Manually saved passwords, private-key text, and passphrases are stored in Apple Keychain. Ask-on-connect credentials remain in memory for the current app run. Configuration backups and default diagnostic bundles do not include passwords, private-key text, or passphrases.

Apple services

CloudKit

Configuration sync is off by default. Only after you explicitly enable it does TermDesk write security-whitelisted configuration to the private CloudKit database of your Apple ID. Host fingerprints, transfer queues, runtime state, passwords, private-key text, and passphrases are not written to CloudKit configuration records.

iCloud Keychain

Credential sync is a separate choice. A password, private key, or passphrase is synchronized through Apple's iCloud Keychain only after you explicitly select that storage option.

App Store and StoreKit

Apple processes TermDesk Pro purchases, refunds, and restoration. TermDesk reads product information and verified entitlement results but does not receive or store payment credentials such as card numbers. The device may keep limited entitlement evidence in its non-synchronizing Keychain for short offline verification.

Remote servers you connect to

TermDesk connects to the SSH servers you configure at your direction. SSH, SFTP, port-forwarding, and Web-workspace traffic goes directly between your device and the destination server and does not pass through Hermit Lab servers.

The remote server operator may process connection logs, IP addresses, and remote content under its own policy. That processing is governed by your relationship with the server operator and is outside this policy.

Support email and this website

This website does not set cookies or load third-party analytics, advertising, or tracking scripts. The web server may retain ordinary access logs such as timestamps, request paths, status codes, IP addresses, and browser identifiers for security, abuse prevention, and operational troubleshooting, with limited operational retention.

If you voluntarily send a support email, we receive the sender address, message contents, and attachments you choose to provide. We use them only to investigate and respond to that request. Do not send passwords, private keys, passphrases, full server addresses, terminal contents, or remote files.

Deletion and retention

TermDesk has no developer-operated user account, so the developer does not hold account-profile data. You can remove servers, key references, and configuration inside the app. Local files, Keychain, iCloud Keychain, and CloudKit are separate data domains and must be cleared separately. Removing the app or local Application Support files does not automatically delete Keychain or CloudKit data.

Support email is retained only as needed to handle the request and meet necessary obligations. Website security logs are retained for limited security and operational needs.

Children, changes, and security

TermDesk is intended for people who manage remote servers and is not directed specifically to children. We do not knowingly collect personal information from children.

We take reasonable measures to protect this website and support communications, but no network transmission or storage system can guarantee absolute security. If this policy changes materially, the effective date on this page will be updated.

Contact us

For privacy or support questions: support@hermit-lab.com

Developer: Hermit Lab
Product: TermDesk