Privacy Policy
Moshpit is a terminal. Your data is none of our business, and the app is built so it never becomes our business.
What we collect
Nothing. Moshpit has no analytics, no crash-reporting service, no advertising SDKs, no tracking, and no accounts — the App Store privacy label reads Data Not Collected because none is. The one server we operate is a push relay for agent notifications, and it is built so it cannot read what it carries — see Notifications below.
Where your data lives
- Connection details (hosts, usernames, ports) are stored on your device.
- Passwords and private keys are stored in the iOS Keychain, protected by the Secure Enclave where available. They never leave your device except as part of the SSH/Mosh handshake with the server you configured.
- Terminal content exists only in transit between your device and your servers, encrypted by SSH or Mosh (AES-128-OCB3), and on your screen.
Network connections
Terminal traffic goes exclusively to servers you add. Beyond that, the app talks to exactly one endpoint of ours — the push relay, and only to register or renew notification pairings: no telemetry, no update pings, no font or CDN fetches. The Local Network permission is requested only so SSH/Mosh can reach hosts on your own LAN (e.g. 192.168.x.x); iOS would otherwise silently drop that traffic.
Notifications & Live Activities
The Dynamic Island Live Activity and in-app alerts are generated on your device from your own session data.
Remote notifications — the alerts that reach you when the app is closed — are sealed on your own host with a per-host key that only your device holds. They travel through Moshpit's push relay and Apple's push service as ciphertext: neither can read the agent's name, the command, or anything else inside; the text is decrypted by a notification extension on your device. To deliver at all, the relay necessarily handles your device's Apple push token and sees when a paired host sends; it stores no message content. What the Live Activity shows on the lock screen can be limited with Show detail on lock screen in Settings, and pushed notifications additionally respect iOS's own Show Previews setting.
Purchases
Moshpit is a one-time purchase handled entirely by Apple's App Store. We receive no payment information.
Changes
If this policy ever changes, the new version ships with an app update and is dated at the top. Since the app collects nothing, the realistic change is wording, not substance.
隐私政策
Moshpit 是一个终端。我们不收集任何数据：无分析、无崩溃上报服务、 无广告 SDK、无跟踪、无账号。我们运营的唯一服务是一个通知推送中转，它读不了自己承载的内容（见下）。
- 连接信息存于你的设备；密码与私钥存于 iOS 钥匙串（有 Secure Enclave 则由其保护）， 除与你自己配置的服务器做 SSH/Mosh 握手外绝不离开设备。
- 终端内容只在你的设备与你的服务器之间加密传输（SSH / Mosh AES-128-OCB3）。
- 终端流量只去你添加的服务器；本地网络权限仅用于访问局域网主机。
- 灵动岛与 App 内提醒在设备本地生成。App 关闭时的远程通知，在你自己的主机上、 用只有你设备持有的密钥密封，经 Moshpit 推送中转与 Apple 以密文送达——两者都读不到内容， 解密发生在你设备上的通知扩展里。为完成投递，中转需要处理你设备的 Apple 推送令牌、 能看到配对主机何时发送；它不存储任何消息内容。
- 购买由 Apple App Store 处理，我们接触不到任何支付信息。