Privacy Policy
Applies to Mochitao for Android, package com.tdd.mochitao, distributed through Google Play. Everything below is the whole policy.
The short version
Mochitao has no account, no server, and no analytics. It does not collect your data, it does not share your data, and there is no company holding anything about you. Everything the app knows stays in your phone's storage.
That is not a slogan, it is the architecture: the app connects straight from your device to a machine you own, over SSH, and nothing in between. There is no backend to send anything to.
What stays on your device
| Data | Where it lives | Why |
|---|---|---|
| Saved hosts (name, address, user, port) | App-private storage, files/hosts.json | So you do not retype them |
| SSH keys generated in the app | Android Keystore, hardware-backed where the device has it | The private key never exists in app memory in a form anything can export |
| Trusted host keys | files/known_hosts | The standard SSH mechanism for detecting a machine that changed |
| Snippets, quick keys, saved layouts | App-private storage | Your convenience |
| Themes, palettes, fonts chosen | App-private storage | Your preference |
| Pro entitlement | Local cache plus Google Play's own record | Play must know what you bought; we do not get a copy |
What is never collected
- No analytics or telemetry of any kind. There is no crash reporter and no usage measurement.
- No advertising identifiers, no device fingerprinting.
- No contact list, no photo library scan, no location, no advertising ID.
- No background upload of anything from your device.
Permissions, and why each one exists
| Permission | Use |
|---|---|
INTERNET, ACCESS_NETWORK_STATE | Opening the SSH connection to your machine. Mochitao blocks cleartext HTTP; everything it sends travels inside an encrypted SSH session. |
USE_BIOMETRIC | Confirming a signature operation with your private key. The key itself is generated and held in the Keystore. |
RECORD_AUDIO | Voice input at the keyboard, which you start explicitly. Recognition is performed by the Android system speech service, not by Mochitao. Mochitao does not store audio. |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC | Keeping a live session alive while the app is in the background, so an agent working on your machine is not killed by the OS. |
POST_NOTIFICATIONS | Showing the session status notification. |
Your keys
Private keys generated inside Mochitao are created in the Android Keystore. On devices with a hardware secure element, they are generated inside that hardware and the private key is never readable by the operating system or by Mochitao. Signing operations require biometric confirmation.
You can also import an existing key. Imported private keys are protected by the same biometric gate.
A changed host key blocks a connection outright. Mochitao has no “always accept” button, and a mismatched key cannot be bypassed in one tap; the old entry must be deleted in Settings first. This is deliberate, and it is the same on every connection.
Children
Mochitao is a developer tool and is not directed at children. It collects nothing from anyone, of any age.
Data retention and deletion
There is no server-side copy, so there is nothing to request a deletion of. Uninstalling the app removes everything it stored. Google's Play Store keeps its own record of your purchase under Google's privacy policy, which we do not control and do not have access to.
Third parties
The app has no analytics SDK, no advertising SDK, and no crash-reporting SDK. Your purchase is processed by Google Play under Google's terms. Your SSH connections go to a machine you control. Those are the only parties involved, and none of them receives your data from us, because we have none to give.
Changes
If this policy changes, the change will be committed to the repository with its date updated, and the app's About screen names the version it shipped with.
Pro purchases
Pro is sold through Google Play. Play keeps its own record of what you bought, under Google's privacy policy, which we do not control and do not have access to. Mochitao reads that record through the Play Billing library and caches the resulting entitlement in app-private storage so the app still works offline. We never receive your payment details, and Google does not share them with us.
Changing or cancelling a subscription is done in your Play account. The app has no ability to cancel on your behalf, which is also why it shows no such button.
Contact
Support and privacy questions go to [email protected]. That is the same address listed on the Google Play listing. There is no mailing list, no account, and no support portal that holds information about you.