Privacy policy

Connections and local data

tmoxie stores saved host names, addresses, ports, usernames, and connection dates on your device. Saved SSH passwords use the iOS Keychain with device-only protection and iCloud Keychain synchronization disabled.

The app also stores preferences, custom shortcuts, trusted server fingerprints, connection counts, recent Web Preview addresses, agent inbox messages, and information needed to recover unfinished remote actions. Recent preview addresses may include a path or query you entered.

tmoxie does not provide an account service or app-managed cloud synchronization. Your iOS backup settings may affect app data. Device-only Keychain items do not migrate to another device.

Your connected machines and services

SSH authentication, terminal input, remote commands, and terminal output travel between your device and the host you select over SSH. Actions such as creating or closing a session change that remote machine.

If you use Herdr, tmoxie communicates with Herdr on the connected machine over SSH. Prompts you send to a remote coding agent reach that agent. The agent or other software on your machine may send information to its own service provider under that provider's terms and privacy policy.

tmoxie does not operate a relay for your SSH sessions or an AI service that receives your prompts.

Photos, files, and clipboard

When you choose an attachment or use a clipboard action, tmoxie reads the content you select for that action. Uploaded photos and files go to a temporary attachment directory on your connected machine. The remote path can then be added to your terminal or prompt.

tmoxie attempts to remove older attachments during later uploads to limit remote storage. This cleanup is not a guaranteed deletion schedule. Remove sensitive uploads from the remote machine yourself, including any copies made by agents or other software.

Dictation

Dictation asks for microphone and speech recognition permission. tmoxie requires Apple's on-device speech recognition and disables dictation when the device or language cannot provide it. It does not fall back to server transcription.

The transcript becomes editable prompt text. Sending that text transmits it to the remote destination you choose, like text you type.

Web Preview

Web Preview connects through your SSH connection to a development server on the remote machine. Pages can load resources and contact services of their own. Those services handle requests under their own privacy policies.

Preview website data uses a temporary browser store. The app separately remembers recent preview addresses on your device.

Purchases

Apple processes in-app purchases. tmoxie checks your purchase status to unlock Premium and stores local trial and entitlement information. tmoxie does not receive your payment card details.

Diagnostics and support

tmoxie keeps a size-limited diagnostic log on your device. Logs can include connection details, remote names and paths, error messages, and app activity. Optional terminal byte recording is off by default. When enabled, it can capture terminal content, including sensitive text displayed by remote software.

Diagnostics stay local until you choose to share them. A diagnostic bundle can include the log, an existing terminal recording, app version, device model, iOS version, timestamps, and a diagnostic session identifier. Review the files before sharing. Do not send passwords, private keys, or confidential terminal content.

If you contact support, your email address, message, and any attachments you send are used to handle your request. You can ask about removal of support correspondence at the address below.

tmoxie does not send usage analytics, advertising identifiers, or automatic diagnostic reports to a tmoxie server. Apple may separately process App Store or device diagnostics according to your Apple settings.

Permissions and visible information

Local network access lets tmoxie reach hosts on your network. Photo and file pickers let you select attachments. Optional app lock uses iOS device authentication. tmoxie does not receive your biometric data.

Local notifications can show agent messages. Live Activities can show host, session, and agent status on your Lock Screen. Control these features in tmoxie and iOS Settings.

Remove data

• Delete a saved host from the host list to remove its saved connection and request deletion of its stored password.
• Remove trusted server fingerprints in Settings under Known hosts. Verify a changed server key before trusting it again.
• Clear the debug log and terminal byte recording in Settings, Help & diagnostics, Diagnostic tools.
• Delete the app to remove its local app container, including the saved agent inbox. iOS Keychain items may remain after app deletion, so remove saved hosts first.

Deleting a saved host or the app does not stop remote sessions, remove uploaded files, or delete data held by a service you use. Manage that data on the remote machine or with the service provider.

This website

This site has no advertising, analytics scripts, contact forms, or cookies set by its own code. GitHub Pages hosts this site. GitHub receives request information needed to serve and secure the pages. See GitHub's privacy statement. A linked service applies its own privacy policy when you visit it.

Questions

Email tmoxie.support@gmail.com for privacy questions. The support page has more help. Changes to this policy appear on this page with an updated date.