Moshpit is a terminal. Your data is none of our business, and the app is built so it never becomes our business.
Nothing. Moshpit has no analytics, no crash-reporting service, no advertising SDKs, no tracking, and no accounts. The one server we operate is a push relay for agent notifications, and it is built so it cannot read what it carries — see Notifications below.
Terminal traffic goes exclusively to servers you add. Beyond that, the app talks to exactly one endpoint of ours — the push relay, and only to register or renew notification pairings: no telemetry, no update pings, no font or CDN fetches. The Local Network permission is requested only so SSH/Mosh can reach hosts on your own LAN (e.g. 192.168.x.x); iOS would otherwise silently drop that traffic.
The Dynamic Island Live Activity and in-app alerts are generated on your device from your own session data.
Remote notifications — the alerts that reach you when the app is closed — are sealed on your own host with a per-host key that only your device holds. They travel through Moshpit's push relay and Apple's push service as ciphertext: neither can read the agent's name, the command, or anything else inside; the text is decrypted by a notification extension on your device. To deliver at all, the relay necessarily handles your device's Apple push token and sees when a paired host sends; it stores no message content. What the Live Activity shows on the lock screen can be limited with Show detail on lock screen in Settings, and pushed notifications additionally respect iOS's own Show Previews setting.
Moshpit is a one-time purchase handled entirely by Apple's App Store. We receive no payment information.
If this policy ever changes, the new version ships with an app update and is dated at the top. Since the app collects nothing, the realistic change is wording, not substance.
Moshpit 是一个终端。我们不收集任何数据：无分析、无崩溃上报服务、 无广告 SDK、无跟踪、无账号。我们运营的唯一服务是一个通知推送中转，它读不了自己承载的内容（见下）。