Privacy Policy
Last updated: March 22, 2025
This Privacy Policy describes how KumaSH ("the App"), developed by Kumalabs ("we", "us", "our"), handles your information. We are committed to protecting your privacy and being transparent about what data the App accesses and stores.
1. Information We Collect and Store
Stored Locally on Your Device
The following data is stored only on your device and is never transmitted to our servers:
- SSH host configurations — hostnames, ports, usernames, and connection settings you configure within the App.
- SSH credentials — private keys and passwords are stored exclusively in the iOS Keychain, Apple's secure encrypted storage.
Stored in iOS Keychain
- Authentication tokens — Keycloak authentication tokens used for account login are stored securely in the iOS Keychain.
- SSH private keys and passwords — all sensitive credentials are stored in the Keychain and never leave your device.
2. Information We Do NOT Collect
We do not collect, store, transmit, or have access to:
- Terminal session content or output
- Commands you execute on remote servers
- Claude Code conversation content or AI responses
- File contents accessed through SSH
- Your IP address or location data
- Device identifiers for tracking purposes
- Usage analytics or behavioral data
3. Third-Party Services
Keycloak Authentication
The App uses Keycloak (hosted at accounts.kumalabs.vn) for user authentication. When you sign in, your credentials are processed by the Keycloak server. Please refer to the Keycloak instance's own privacy practices for details on how authentication data is handled server-side.
Anthropic Claude API
The Claude Code AI feature communicates with the Anthropic Claude API. This communication is routed through your SSH tunnel — not directly from the App to Anthropic's servers. The App does not send any data to Anthropic independently. Your use of Claude Code is subject to Anthropic's own terms and privacy policy.
4. Analytics and Tracking
KumaSH does not include any analytics frameworks, tracking pixels, or advertising SDKs. We do not track your usage of the App in any way.
5. Data Sharing
We do not sell, share, or transfer your personal data to any third parties. The App operates on a zero-knowledge principle — we cannot access your data even if requested.
6. Data Security
All sensitive data is protected using iOS platform security features:
- SSH credentials are stored in the iOS Keychain with hardware-backed encryption.
- All SSH and MOSH connections use industry-standard encryption protocols.
- No data is stored on our servers.
7. Children's Privacy
KumaSH is not intended for use by children under the age of 13. We do not knowingly collect any information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date. We encourage you to review this page periodically.
9. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at: