Privacy Policy
Last updated: March 2026
1. Overview
Amethyst is an iPhone SSH terminal developed by Orochi Systems. Amethyst is built with a local-first model: server records, preferences, and session state are stored primarily on your device. In the current implementation, Amethyst does not require an app account sign-in.
2. Server Data You Provide
When you add or edit a server, Amethyst stores data such as nickname, host/IP, username, port, connection mode, and related connection preferences. This data is used only for connections you explicitly initiate.
3. Credentials and SSH Keys
If you use SSH keys, private keys generated or imported in Amethyst are stored in iOS Keychain. If you choose password auth and save a password, it is also stored in iOS Keychain. We do not upload private keys or saved passwords to Orochi Systems servers.
4. Biometric Protection
You can enable optional Face ID / Touch ID protection for saved SSH key usage on a server. Biometric prompts are handled by Apple LocalAuthentication/Keychain APIs on device.
5. Terminal Session Content
Commands you run and output you receive are part of your direct sessions with your own infrastructure. Amethyst may keep local terminal scrollback and session metadata according to your settings. Terminal content is not sent to Orochi Systems servers.
6. Local Personalization and Bookmarks
Amethyst stores local preferences such as keyboard layout, pinned commands, command usage counts, reconnect settings, and theme selection. Output bookmarks are stored locally and encrypted using a key protected in iOS Keychain.
7. Local Storage and Security Controls
Amethyst persists app data in your device storage and applies platform controls such as iOS file protection. Known host fingerprints are stored locally for host-key trust and mismatch protection.
8. Host Key Verification
Amethyst verifies SSH host keys and stores trusted host fingerprints. New or mismatched host keys are blocked until you explicitly trust the presented key.
9. Networking Features
Amethyst can open SSH sessions, use Mosh-aware transport flows, list/upload/download files over SFTP, and open SSH forward tunnels. Network traffic for these features is between your device and the servers you configure.
10. Local Network Discovery
If you use host discovery, Amethyst can scan for SSH services on your local network using Bonjour and local reachability probing. This behavior requires Local Network permission and can be skipped by manual server entry.
11. Camera and QR Import
Amethyst requests camera permission only for QR code scanning during server import. If camera access is denied, you can still configure servers manually.
12. Notifications and Live Activities
Amethyst may request notification permission for local alerts (for example, disconnect or task-complete events). Alert behavior depends on your in-app settings and app state. Amethyst can also show active-session state via Live Activities.
13. Third-Party Services and Tracking
Amethyst relies on Apple platform frameworks and open-source networking components to provide terminal connectivity. We do not include advertising SDKs and do not operate third-party analytics/tracking pipelines for Amethyst in the current implementation.
14. Data Sharing and Sale
We do not sell personal data and do not share your credentials or terminal content with data brokers.
15. Data Retention and Deletion
You can delete saved servers, local bookmarks, and stored credentials from within Amethyst. Removing the app clears sandboxed app files; Keychain handling follows Apple platform behavior for your device.
16. Children's Privacy
Amethyst is a developer tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
17. International Users
If you use Amethyst outside your home jurisdiction, local privacy laws may apply.
18. Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised "Last updated" date.
19. Contact
If you have questions about this Privacy Policy, contact us at amethyst@orochisystems.com or visit https://orochisystems.com/amethyst/support.