Privacy Policy
Last updated: 28 May 2026
TermBridge is built so that neither we nor our servers can read your terminal. This policy explains, plainly, what that means.
ciphertext it cannot read. The app sends
anonymous usage events and crash reports, and you can turn that off in Settings.
Data we collect
Usage events and crash reports. The phone app sends anonymous product analytics (which screens are used, which features are tried) and crash reports to PostHog under a random install id. It never sends terminal content, file contents, commands, or your name or email. Turn it off in Settings → Report analytics. There are no user accounts and no advertising SDKs.
What the relay keeps. To apply plan limits, the relay stores a hash of your phone's pairing key, the Mac rooms it has joined, and, for Pro, an anonymous RevenueCat id. It also keeps a short access log (room id, time, result) for abuse detection. None of this identifies you or your terminal content.
Your terminal data
When you pair your phone with your Mac, the two devices establish an end-to-end-encrypted channel (X25519 key exchange + AES-256-GCM). Everything that flows between them, keystrokes, terminal output and the list of your sessions, is encrypted on one device and decrypted only on the other.
- The relay server routes sealed frames only. It never holds a key and never sees plaintext.
- A fresh ephemeral key is derived for every connection (forward secrecy).
- Pairing derives the shared secret directly between your phone and Mac. There is no key server.
- We do not log, store, or inspect your terminal content. The relay has no key to open it.
On your Mac
The TermBridge agent runs locally and holds a single outbound encrypted connection to the relay. No inbound port is opened on your Mac. The shell hook stores its pairing keys locally in your user keychain/config and nowhere else. You can remove it any time with the bundled uninstaller.
Permissions
Camera: to scan the pairing QR code. Microphone and speech recognition: only while you dictate, and transcription runs on the device. Photos: only when you choose a photo to send to your Mac. Notifications: to tell you an agent needs you. None of these run in the background.
Third parties
The relay runs on Cloudflare, which carries only encrypted traffic for us. Analytics and crash reports go to PostHog. Purchases go through Apple, Google and RevenueCat. We do not share data with advertisers or data brokers.
Children
TermBridge is a developer tool and is not directed at children under 13.
Changes
If this policy ever changes, the "last updated" date above will change with it. Material changes will be noted on this page.
Contact
Questions about privacy? Email [email protected].