Revive SSH — Privacy Policy

Last updated: 3 November 2026

Who we are

Revive SSH — the app for iPhone and Android, its desktop versions and the revive-ssh Linux agent — is made by Electric Entropy. Electric Entropy is the brand of traker24.eu logistyka Łukasz Orzechowski, Rynek 16/8, 59-500 Złotoryja, Poland, NIP (VAT ID) PL6941590534, which is the data controller (“we”, “us”). This is also the seller shown in the App Store. Contact for anything in this policy: info@electricentropy.eu.

The short version

• No accounts, no analytics, no advertising, no tracking across apps or websites.
• Your servers, passwords, keys and terminal sessions stay on your devices and your servers. We never see your passwords, private keys, commands or terminal output.
• Notification text is end-to-end encrypted between your server and your phone. Our push relay stores nothing.
• The only personal data we or our providers process: purchase records (RevenueCat, Apple, Google), push tokens needed to deliver notifications, and short-lived web server logs.

Data that stays on your device

• Server list (names, addresses, ports, user names, pinned host key fingerprints) and settings — in the app's private storage.
• Passwords and the device's SSH private key — in the system's secure storage (iOS Keychain and Secure Enclave, Android Keystore; on computers: TPM, Secure Enclave or the system keychain). Hardware-backed keys cannot be exported.
• Terminal output and scrollback of your sessions, and the in-app diagnostic log.

This data is not sent to us. Uninstalling the app deletes it.

Data on your own server

The optional revive-ssh agent runs on your server under your user account. It keeps session history and the working directory there (~/.local/state/revive-ssh) so that sessions survive disconnects and restarts, adds each paired device's public key to ~/.ssh/authorized_keys, and keeps the encrypted push tokens and notification keys of paired phones (push.json, readable only by you). You control this data; we have no access to it. On-disk history can be turned off with history = off in ~/.config/revive-ssh/config; revive-ssh revoke removes a phone's key and its push token.

Diagnostic log. If you turn on sending the diagnostic log in the app (off by default), the app sends it over your existing SSH connection to your own server (~/.local/state/revive-ssh/app.log). It contains connection events and errors, never terminal content or typed text. It is not sent to us.

Push notifications

If you allow notifications, the app registers with Apple Push Notification service (iOS) or Firebase Cloud Messaging by Google (Android), which issue a device token. The app sends this token to our push relay at get.vendo.bot, which returns it encrypted with the relay's key; only this encrypted token is kept, by the agent on your server.

The phone also creates a random notification key in its secure storage and gives it to the agent over SSH. The agent encrypts each notification's title and text with it (AES-256-GCM) before sending. The relay, Apple and Google see only the encrypted message and a generic “Revive SSH: new notification”; the phone decrypts the text itself. Agents older than 0.1.22 send the text unencrypted over TLS (HTTPS) instead; it is still not stored.

The relay stores neither tokens nor messages. To enforce a rate limit it keeps, in memory only and for at most one hour, the times of recent requests per encrypted token. Apple and Google process the token and the encrypted message to deliver it (and on Android, Firebase also uses an installation identifier) under their own privacy policies. You can turn notifications off in the app's settings or in the system settings.

Purchases (Revive SSH Pro)

Subscriptions and the lifetime purchase are sold and billed by Apple (App Store) or Google (Google Play). We receive no payment card data and no name or e-mail address. We use RevenueCat, Inc. (USA) to validate purchases and know whether Pro is active. RevenueCat receives a random anonymous app user ID, the store's purchase records, the app version, device and system type, store country and IP address. See RevenueCat's privacy policy. The Windows and Linux versions are free and do not use RevenueCat.

Agent downloads and updates

The agent checks for a signed update at most every six hours (you can turn this off with revive-ssh update --disable). The request identifies only the agent version and platform (e.g. revive-ssh/0.1.23 (linux-amd64)). Installing the agent or using our APT/RPM repositories downloads files from the same server.

Web server logs

Our server get.vendo.bot (product page, downloads, updates and push relay; hosted by OVH in France) writes a standard access log for every request: IP address, time, requested address, status and user agent. It is used only for security and troubleshooting and is deleted after 14 days.

Camera

The camera is used only to scan the pairing QR code. Images are processed on the device and are not stored or sent.

Legal bases and transfers

We process the data above to provide what you asked for — notifications and purchases (Art. 6(1)(b) GDPR) — and for our legitimate interest in keeping the service secure and working (Art. 6(1)(f) GDPR: logs, rate limits). Apple, Google and RevenueCat may process data in the United States; they rely on the EU–U.S. Data Privacy Framework and/or the European Commission's standard contractual clauses, as described in their policies.

Your rights

You may request access to, correction, deletion or restriction of your data, object to processing and ask for data portability. Because there are no accounts, we can usually only find data you point us to (for example the store and date of your purchase). You may also complain to a supervisory authority — in Poland the President of the Personal Data Protection Office (Prezes UODO). Contact: info@electricentropy.eu.

Children

Revive SSH is a technical tool not directed at children under 13 (16 in the EU).

Changes

When this policy changes we update this page and the date above.