Privacy Policy

TermPod is a shared terminal app. Your privacy and the security of your terminal data are fundamental to how we built it. The relay server is zero-knowledge — it cannot read your terminal content.

All terminal data is end-to-end encrypted before leaving your device. The relay server forwards encrypted frames it cannot decrypt. We use ECDH P-256 key exchange with AES-256-GCM encryption. WebRTC connections use inherent DTLS encryption. Local connections use the same ECDH + AES-256-GCM scheme.

When you create an account, we store:

• Your email address (for authentication)
• A hashed password (PBKDF2, never stored in plaintext)
• Device metadata (name, platform) for session routing

We do not collect, store, or have access to:

• Your terminal content (encrypted end-to-end)
• Command history or shell output
• File contents on your machine
• Analytics, telemetry, or usage tracking

The relay server (Cloudflare Workers + Durable Objects) handles WebSocket routing and device presence. It processes only encrypted binary frames and JSON control messages (connection metadata, not terminal data). The relay is open source and can be self-hosted.

When your devices are on the same network, TermPod connects directly via Bonjour (local WiFi) or WebRTC peer-to-peer. These connections do not route through our servers. Local network discovery uses mDNS and requires your explicit permission on iOS.

We use Cloudflare for relay hosting and TURN relay (when direct P2P fails). Cloudflare's privacy policy applies to infrastructure-level data (IP addresses, connection metadata). No third-party analytics, advertising, or tracking services are used.

Account data is retained while your account is active. Terminal data is never stored on the relay — it is forwarded in real-time and discarded. You can delete your account at any time, which removes all associated data.

TermPod is open source under the MIT license. You can audit the encryption implementation, relay server, and all client code on GitHub. You can also self-host the relay server for complete control over your data.

We may update this policy as the product evolves. Significant changes will be communicated via the app or our website.

Questions about privacy? Email hello@termpod.dev.