Privacy Policy

Last updated: 26 October 2026

1. Controller and contact

2. Connections to your servers

Prompt22 connects directly to the SSH or SFTP servers you choose. It sends the information needed to authenticate and perform your commands and file operations, such as your username, public key or password, commands and remote paths, over an encrypted SSH connection. Your server and network providers may process connection information, including your IP address. The server operator controls server-side logs and retention. Connections and file contents do not pass through a Prompt22-operated server.

3. Information stored on your device

• Host profiles and snippets: server addresses, ports, usernames, display names, folders, tags, connection settings, identity references, startup commands and saved snippets are stored so you can reuse them. Trusted server public keys and fingerprints are stored to detect changed host keys.
• SSH identities and saved passwords: generated or imported private keys are stored in Apple Keychain. Saving a host password is optional and off by default. If you enable Save Password and save the host, its password is stored in Apple Keychain, not in app preferences or CloudKit. The Keychain item also contains the host/account details needed to match the password to the correct connection. Saved passwords use Keychain’s When Unlocked protection and can sync through iCloud Keychain. Passwords entered only for a connection, keyboard-interactive authentication replies and imported-key passphrases are not saved for later reuse.
• Sessions and terminal history: session details, appearance preferences and the last SFTP directory are saved locally. Rendered terminal output, which can contain sensitive information printed by a server, is saved locally to restore scrollback. Prompt22 excludes its saved scrollback directory from device backups and does not sync it through CloudKit.
• Command history: Remember Commands is optional and off by default. On supported shells, it records commands and their arguments after the shell reports success, along with the server/account, use count and last-used time, to offer recent commands and suggestions. This history stays on the device, is excluded from backups and is not synced through iCloud. It is separate from terminal scrollback and is not imported from the server’s shell history. Password-prompt replies are excluded, but secrets typed as command arguments cannot always be recognized. Pause history or start a sensitive command with a space to exclude it.
• Downloads: files are downloaded to a temporary local file, then saved in the folder you selected in Settings. The default is Prompt22’s Downloads folder. A saved folder permission allows later downloads to use your selection. Choosing iCloud Drive or another file provider means that provider may sync the downloaded files.
• Uploads: when you select files in Files, Prompt22 receives permission to read those files and creates protected temporary local copies for the upload. It sends their contents and names directly to the remote server and folder you chose. The original local files are not changed. Temporary copies are removed when the transfer ends; iOS may also clear temporary storage. A remote temporary file is renamed after successful upload. If the connection is lost or the app is force-quit, a partial remote file may need to be removed on your server.

4. iCloud and Apple services

When iCloud is available, Prompt22 syncs host profiles, trusted host keys and snippets through your private CloudKit database. This includes saved commands; avoid putting secrets in snippets or startup commands if you do not want them synced. SSH identities marked for sync and passwords you choose to save use iCloud Keychain separately. Saved passwords are matched to the host and login account; their availability on another device depends on your Apple Account and Keychain settings. We do not receive access to the contents of your private CloudKit database or Keychain.

Apple processes information under its Privacy Policy and your account settings. Your iCloud, Keychain and device-backup settings determine which supported information is synced or backed up. Deleting the app alone does not necessarily delete synced data or Keychain items.

5. Authentication and background activity

Optional device authentication uses Apple’s system authentication interface. Prompt22 receives the result, not your Face ID data or device passcode. The optional app-preview setting conceals app contents in the app switcher and during interruptions; it is separate from authentication.

User-started uploads and downloads may continue in the background when iOS allows it. iOS can display filenames and transfer progress on the Lock Screen or Dynamic Island. Prompt22 does not use this to track your activity across apps.

6. No advertising or tracking

Prompt22 has no advertising, third-party analytics SDK or developer-operated account service. We do not sell personal information or track you across other companies’ apps and websites. We may receive crash reports and aggregate app diagnostics that you choose to share through Apple’s App Store or TestFlight services.

7. Support and this website

If you email support, we receive your email address, message and any attachments you choose to send. We use them to answer your request and investigate the issue. Please remove passwords, private keys and other sensitive information from screenshots and logs. Our email providers process the messages to deliver and store them.

This website is hosted by Cloudflare. Visiting it sends ordinary web-request information, such as your IP address and browser details, to the hosting provider for delivery and security. These pages contain no advertising or analytics scripts. See Cloudflare’s Privacy Policy. Service providers may process information outside Switzerland or the EEA under their applicable terms and safeguards.

8. Retention, deletion and your choices

You can delete hosts, trusted host keys, snippets and SSH identities in the app. To remove a saved password, turn off Save Password in the host editor and save, or delete the host. Deletions of synced items propagate through the corresponding Apple sync service when available. Closing a session removes its saved scrollback. Reducing the scrollback limit discards older history. Removing an entry from the Transfers manager does not delete a completed local download or remote upload. Delete downloaded files using Files or its storage provider, and remote files through the server or SFTP browser.

You can delete individual command-history entries or clear history for a server/account in Command History. Settings → Terminal → Command History also lets you clear all command history on this device. Pausing or disabling Remember Commands stops recording but does not delete existing entries, and closing a session does not clear them. Command history retains up to 1,000 unique commands per server/account, with a total limit of 5,000 across the device; older entries are removed as these limits are reached.

Local app data remains until you remove it, delete the app or iOS removes it. Files saved outside the app, remote server data, synced records, Keychain items and backups have their own lifetimes. Manage iCloud and backups in Apple’s settings. Support correspondence is kept only as long as reasonably needed to resolve the request and meet legal obligations.

You may request access, correction or deletion of personal information held by us using the contact above. We cannot delete files from your servers or access your private iCloud contents on your behalf. You may also contact the Swiss Federal Data Protection and Information Commissioner or your local data-protection authority.

9. Changes

We may update this policy as the app changes. The date above identifies the current version.