Portlight privacy policy

Effective 5 October 2026. This policy covers Portlight: SSH & SFTP Client (com.tudiapps.portlight), published by Gurmehub under the TudiApps brand. Our general privacy policy covers the website and our other apps.

In short: Portlight has no account, no cloud and no telemetry (crash reports only if you turn them on). Your servers, keys and settings stay on your phone, and we see none of them. It does not use Firebase, analytics or ads.

Kept on your phone

• Hosts, groups, snippets, port-forward rules, trusted host-key fingerprints and the AI approval log: in an encrypted on-device database whose key lives in the Android Keystore.
• SSH private keys, SSH passwords you chose to remember, your AI API key and the app PIN’s verifier: in the Android Keystore only, for this device only.
• Display settings (theme, language, font size) and the name of your current plan.

App backup is turned off, so none of this goes to a cloud backup or another device. Uninstalling the app deletes all of it.

What leaves the phone, and where

What	Where to	When
SSH / SFTP traffic	The servers you added	When you connect
Pairing data (hosts, keys, known_hosts)	From the portlight command on your computer to the phone, end-to-end encrypted	When you pair, after you confirm the same code on both screens
The encrypted pairing envelope	The Portlight relay, only if a direct local connection fails	Same
Your question, a short server summary and the masked output of commands you approved	The AI provider you chose (Anthropic, OpenAI, OpenRouter or your own Ollama), with your own API key	Only when you use the optional AI operator
Nothing is sent; a signed list of ready-made commands is only downloaded, with no cookies or identifiers	GitHub (raw.githubusercontent.com/tudiapps/portlight-snippets)	When you open the snippet gallery
Pro and Lifetime purchases and the ownership check	Google Play, through the store app on your device; payment details never reach the app or us	When you buy or restore, and on launch (whether a subscription is still active)

The relay cannot open what it carries: only your phone and computer can decrypt it. It keeps an envelope in memory for at most 60 seconds, never writes it to disk and logs no IP address, only a daily request count.

The AI operator masks known secret patterns (passwords, tokens, private keys) before anything is sent, but masking cannot promise to catch every secret; you can choose not to use AI on sensitive servers. The provider’s own policy governs what it does with the data. The AI never runs a command by itself; every command runs only after you approve it.

What we do not collect

• Accounts, email addresses, phone numbers: none.
• Analytics, advertising ID, usage statistics, telemetry: none.
• Crash reports: off by default. If you turn them on (Settings › Data › Crash reports), a crash sends the error type, a scrubbed error message, the stack trace, the app version and the OS version to our own Sentry server (sentry.gurmehub.com). IP addresses, host names, user names, emails, home directories, long tokens and private keys are removed from messages before sending; no user id, device name, session, screenshot or breadcrumbs are sent. Turning it off stops reporting at once.

Permissions

• Internet: to reach your servers.
• Camera: only to scan a pairing QR code; no image is stored.
• Notifications and a foreground service: so an open SSH session keeps running in the background.
• Wi-Fi multicast: to find your computer on the local network while pairing.
• Billing: to buy Pro or Lifetime through Google Play.

Deleting your data

Everything Portlight keeps is on your device; we hold no server-side data about you. Uninstalling the app deletes it. To cancel a subscription, use Google Play › Payments & subscriptions.

Children

Portlight is a tool for server administrators. It is not directed at children under 13 and does not knowingly collect data from them.

Contact

Gurmehub (TudiApps), [email protected]. If this policy changes, the date above changes with it.