Privacy Policy

Last updated: July 24, 2026

Beijing KAKA SYS Co., Ltd ("we", "us", or "our") operates the termock application for macOS, iOS, and Windows, and the account server at api.kakasys.com (together, the "Service"). termock is an SSH/SFTP client: it connects your device to servers that you own or administer.

This page explains what data we collect, why, and the choices you have. By using the Service you agree to this policy.

1. What we collect

Account data. When you register, we store your email address and a one-way (argon2) hash of your account password. We never store your account password in plain text.
Subscription status. Your plan (free / trial / pro), its expiry date, and whether it came from Apple, Stripe, or a manual grant. We receive subscription events from Apple and Stripe; we never see or store your payment card details.
Synced connection settings (optional). If you use cloud sync, the hosts you save in the app — labels, addresses, usernames, ports, and any saved passwords or key paths — are uploaded to and stored on our server so they can sync to your other devices.
Server logs. Our API server keeps standard operational logs (IP address, request path, timestamps) for security, rate limiting, and abuse prevention. Logs are rotated and retained for a limited time.

2. What we do NOT collect

Your SSH/SFTP traffic. Connections go directly from your device to the servers you configure. Session content, commands, files, and credentials in transit never pass through our servers.
Analytics or tracking. The app contains no analytics, advertising, or third-party tracking SDKs, and no crash-reporting service. We do not build usage profiles.
Contacts, photos, location, or other device data. The app requests no such permissions.

3. How your connection settings are stored

On your devices, saved hosts (including any saved passwords) are stored in the app's private data directory. If you enable cloud sync, the same data is transmitted over HTTPS (TLS) and stored on our server.

Important: synced host passwords are stored on our server as you saved them (not additionally encrypted at rest), protected by TLS in transit and by server access controls. If you prefer not to store passwords on our server, leave the password field empty in the app — you will be prompted at connect time instead — or do not use cloud sync.

4. How we use data

To create and secure your account (including anti-abuse rate limiting).
To provide cloud sync between your devices.
To verify and maintain your subscription entitlement.
To respond when you contact us for support.

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

5. Third-party processors

Apple — In-App Purchase processing on macOS/iOS. Governed by Apple's privacy policy: apple.com/legal/privacy.
Stripe — payment processing on Windows/desktop web checkout. Governed by Stripe's privacy policy: stripe.com/privacy.
Cloud hosting provider — our API server and database are hosted on infrastructure we rent; the provider has no access to the database content beyond hosting the machine.

6. Where data is stored

Our servers are located in the People's Republic of China. If you use the Service from another jurisdiction, your account data and synced settings will be transferred to and processed there. By using the Service you consent to this transfer.

7. Data retention and deletion

We keep your account data and synced settings for as long as your account exists. You may delete individual synced hosts at any time by overwriting them via sync. To delete your account and all associated data, email us at ios@kakasys.com from your registered address; we will delete the account, its entitlement records, and its synced data within 30 days, except where retention is required by law.

8. Your rights (EEA/UK users)

If you are in the European Economic Area or the UK, you have the right to access, rectify, export, restrict, or delete your personal data, and to object to processing or withdraw consent. Email ios@kakasys.com to exercise these rights; we may ask you to verify your identity. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We protect data in transit with TLS, hash account passwords with argon2, rate-limit authentication endpoints, and restrict server access to authorized personnel. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Children's privacy

The Service is not directed at anyone under 16. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Changes take effect when posted at this URL, with the "Last updated" date revised. Material changes will also be announced in the app.

12. Contact

Beijing KAKA SYS Co., Ltd
Email: ios@kakasys.com