Privacy policy — KodeBy SSH
Last updated: 19 October 2026
KodeBy SSH ("the app") is an SSH and SFTP client made by KodeBy. This policy explains what happens to your information when you use the app.
Summary
The app does not collect, send or share any personal data with KodeBy or anyone else. It connects only to the servers you add, and everything you enter stays on your phone.
What the app stores on your phone
- The servers you add: name, address, port and user name.
- SSH keys you create or import, and passwords you choose to remember.
- The identity (host key fingerprint) of each server you have trusted.
- Your settings, such as theme, text size and app lock.
Private keys and saved passwords are encrypted with a key held in Android's secure key store (hardware-backed where the phone supports it). That key never leaves the phone, and the app never shows a private key in plain text.
All of this is kept only in the app's private storage on your device. The developer never receives it.
Connections to your servers
The app connects only to servers you add, and only when you open a session or the file browser. Everything you type in a terminal and every file you move travels over SSH, encrypted between your phone and your server. What happens on your server is governed by whoever runs that server.
The app never contacts KodeBy or any other service. It has no account, and nothing is sent anywhere in the background.
Files
When you download a file, Android's own save dialog lets you choose where it goes. When you upload one, you pick it with Android's file picker. The app only reads or writes the files you choose.
Exporting a private key
You can export a private key as a file, for example to use it on your computer. This needs your phone's screen lock first. You can protect the file with a passphrase (recommended). The file is saved where you choose, and the app does not send it anywhere.
Backups
Android backup is turned off for this app, so its data is not included in your Google backup or moved to a new phone. The encrypted keys and passwords could not be read on another phone anyway, because the key that unlocks them stays in this phone's secure key store.
Permissions
- Internet — to connect to the servers you add.
- Foreground service and notifications — to keep open sessions running in the background, with a notification that shows how many are open and lets you disconnect.
- Biometrics / screen lock — for the optional app lock and before exporting a key. The check is done by Android; the app never receives your fingerprint, face or PIN.
Third parties
The app contains no ads, analytics, crash reporting or tracking, and no third-party services that receive your data.
Deleting your data
You can delete servers, keys and saved passwords in the app at any time. Uninstalling the app, or clearing its storage in Android Settings, deletes all of its data from your device, including the encryption key. Keys you have added to a server's authorized_keys file stay on that server until you remove them there.
Children
The app is not directed at children under 13.
Changes
If this policy changes, the new version will be published at this address with a new date.
Contact
Questions about this policy: admin@kodeby.dk
This website doesn’t use cookies, analytics or tracking either.