Privacy Policy: Bash Board

Bash Board is designed so that your SSH credentials, servers, macros, and command logs stay on your device. We do not run a Bash Board cloud account for storing your macros or secrets.

The App connects to:

1. SSH hosts you configure, to run the commands you define
2. Google Play, for purchases and subscription entitlement

Depending on how you use Bash Board, the App may store locally:

Encryption

Credentials, trusted SSH host keys, and the local Pro entitlement cache are stored using encrypted preferences backed by the Android Keystore.

Metadata such as labels and hostnames is stored in the App’s local database on the device.

Live command output is shown on-device in the execution log sheet (including terminal-style rendering such as colors and progress-bar updates) and the latest run may be saved in that local database. It is not uploaded to SudoCod. The App blocks recents screenshots of its UI so keys and logs are less likely to appear in the system overview.

To the best of our knowledge for the current App, we do not:

• Create a Bash Board user account or profile on our servers
• Upload your SSH passwords, private keys, macros, or command output to SudoCod servers
• Sell your personal information
• Show third-party advertising in the App
• Use the App to run analytics SDKs that profile you for ads (unless this policy is updated and you are notified)

If we add optional analytics, crash reporting, or support tooling later, we will update this policy and describe what is collected and why.

The App requests network access to:

4.1 Your SSH servers

When you tap a macro (or test a connection), the device opens an SSH session to the host you configured and sends the credentials you stored, solely to authenticate and run your command. Those credentials leave the device only for that purpose and only to that destination.

If a connection attempt fails for a temporary network reason, the App may automatically retry connecting to the same host on your device. Authentication failures and host-key mismatches are not retried as if they were temporary errors. You can cancel an in-progress command from the live log sheet; that stops the SSH session to your host.

The App uses trust on first use (TOFU) for SSH host keys: the first successful connection to a host:port pins that server’s host key in encrypted on-device storage. Later connections fail closed if the host key changes (which can indicate a man-in-the-middle attack or an intentional server reinstall/key rotation). You can reset a trusted host key in Server settings after intentional changes.

You are responsible for:

• Choosing trustworthy hosts
• Securing accounts and keys on those hosts
• Complying with laws and policies that apply to systems you access

4.2 Google Play billing

Subscription purchase, restore, and entitlement checks use Google Play Billing.

Google processes payment data under its own privacy policy. We receive entitlement signals (for example, whether a subscription is active), not your full payment card details.

4.3 Network status

The App may check whether the device has a network connection (for billing / entitlement flows). That check does not send your SSH credentials to us.

Bash Board offers Bash Board Pro as a paid auto-renewing subscription via Google Play. An active Pro entitlement (or a temporary debug unlock in development builds) is required to use macros and servers; otherwise the App shows a paywall.

• Pricing, free-trial length (for example a 14-day trial when offered), and renewal terms are shown in the store listing and/or purchase sheet at the time of purchase.
• The App may cache whether Pro appears entitled (encrypted on-device) so basic offline checks can work; purchase and restore still go through Google Play.
• Manage or cancel subscriptions in your Google Play subscription settings.
• Deleting the App does not automatically cancel a store subscription.

• Local App data remains on the device until you delete it within the App (for example, deleting a server or macro) or uninstall the App.
• Uninstalling removes App-stored data from that device, subject to normal OS behavior.
• Store subscription records are retained by Google according to its policies.
• We do not maintain a separate cloud copy of your macros or credentials to “delete on request,” because we do not host that content.

• Application backup of Bash Board data is restricted (allowBackup disabled). Cloud backup and device-to-device transfer rules also exclude credentials, host keys, the entitlement cache, and the local database (including current *_v2 store names).
• The App does not permit cleartext HTTP. SSH sessions use the SSH protocol to hosts you configure.
• You remain responsible for device lock screens, OS updates, and physical security of the device.
• Anyone with unlocked access to your device may be able to use macros you have configured and view stored command output.

The App is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information through the App in a way that concerns you, contact us so we can help you remove local App data by uninstall guidance.

The App processes data primarily on your device. Google Play transactions may be processed by Google in various regions under its terms.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update means you accept the revised policy. Material changes may also be noted in the store listing or in-app notice when appropriate.

For privacy questions about Bash Board:

• Developer: SudoCod
• Product: Bash Board
• Email: privacy@sudocod.com

If this address is not yet active on your store listing, use the support / developer contact shown on the Google Play product page.