Privacy Policy — TernX – SSH & Terminal
Last updated: October 6, 2026
TernX – SSH & Terminal (the “App”) is a macOS app provided by zheng weng (the “developer”). It connects, over SSH, Telnet, or serial, to computers you choose. If you do not sign in, the App does not send your connection details to the developer’s server.
1. Data that stays on this Mac
Hosts, groups, keys, known hosts, snippets, port forwards, and connection logs are stored in the App’s private area on this Mac. Host passwords and private keys are encrypted with AES-GCM before they are stored. The key that decrypts them stays in this Mac’s Keychain and is not part of sync.
- The private key of a Touch ID key is created in the Secure Enclave and cannot be copied out of the App.
- Port-forward rules, connection logs, terminal contents, remote files, and credentials used to import from a cloud provider stay on this Mac. They are not synced.
- The App includes no ads, analytics, or tracking SDKs.
2. Data sent only after you turn on cloud sync
An account is optional. Only after you turn on cloud sync does the App send the following to the sync service. Sync covers hosts, groups, snippets, and known hosts. Passwords and private keys stay on this Mac. This data is not used for advertising and is not sold.
| Data | What is sent |
|---|---|
| Account | Email address. The password is used to authenticate the sign-in. The developer does not receive it in plain text |
| Groups | Names |
| Hosts | The host record: name, protocol, address, port, username, OS name, and serial settings. The password is not uploaded |
| Snippets | Name and command |
| Known hosts | Host names, the server public key, and the fingerprint |
SSH, Telnet, serial, and SFTP traffic goes directly between this Mac and the destination you chose. The developer does not relay that traffic.
3. Data the App does not collect
The App does not collect SSH passwords, private keys, terminal contents, or remote files. It also does not collect location, contacts, photos, health, payment details, browsing history, diagnostics, or advertising identifiers. It does not use the camera, microphone, contacts, or photo library.
4. Device capabilities
| Capability | Use | What happens to the data |
|---|---|---|
| Network | SSH, Telnet, SFTP, and sync that you start | A session goes directly to the destination. Sync is described in section 2 |
| Keychain | Store the vault key on this Mac | The vault key itself is not synced |
| Touch ID / Secure Enclave | Create a private key in the Secure Enclave when you ask for one | That private key cannot be copied off the Mac |
| Serial ports and files | Serial connections, SFTP, and reading a key file | The App uses only the device or file you select |
5. Third parties
The developer does not sell this information. Data you sync is stored by the sync service and linked to the account email address. If you never sync, nothing is sent to that service.
6. Retention and deletion
Data on the Mac is removed when you delete the App. Records already sent to the sync service are not removed automatically. To delete them, email wengzheng@msn.com and include the email address you used to sign in. The developer will delete that account and the uploaded groups, hosts, snippets, and known hosts.
7. Children
The App is not directed to children under 13. The developer does not knowingly collect personal information from children.
8. Changes
If this policy changes, this page will be updated and the date above will change.
9. Contact
Developer: zheng weng
Email: wengzheng@msn.com