Privacy

TermBridge is built so that the parts you don’t control can’t see your data.

What the relay can see

• An opaque room identifier that pairs your phone with your Mac.
• The size and timing of encrypted frames (unavoidable for any router).
• Your plan tier, to enforce limits.

What the relay cannot see

• Your commands or terminal output — these are end-to-end encrypted; the relay only routes ciphertext.
• Your encryption keys — they’re derived directly between your devices and never sent to any server.
• Any account or identity — there are no accounts.

No accounts, ever

TermBridge has no sign-up, no login, and no password. Pairing is a direct device-to-device key exchange via QR. There’s no profile to create and nothing about you stored centrally.

On-device data

• The shared key lives only on your paired phone and Mac.
• Scrollback (the replay buffer) is held in memory on your Mac per shell, capped at 256 KiB each — it isn’t shipped to any server.
• Files you attach upload to your own Mac, not to a third party.

In-app purchases

Subscription and purchase handling goes through Apple’s standard in-app purchase system and our billing provider. TermBridge receives an entitlement (Free vs Pro) — not your payment details. See Plans & limits.

Removing everything

Uninstalling restores your shell to completely normal and removes what the app added — see Uninstalling.

Next

Review the Plans & limits.