Drover — Privacy Policy

Drover connects over SSH to machines you own. There is no service in the middle: no backend of mine, no account system, no analytics, and nothing of yours on anybody else’s computer. I (the developer) never see your data, because none of it is ever sent to me. This app-specific policy supplements my general privacy policy and takes precedence for Drover where they differ.

What the App Stores

• ›Private keys and passwords — kept in the iOS keychain on your device. They are never written to a file or a log, and never transmitted anywhere except to the host you pointed them at.
• ›Host details — the name, address and username you enter for each machine, stored on the device only.
• ›Known host keys — the public key each host presented the first time you connected, so Drover can tell you if it ever changes. Public keys, held on the device.
• ›Local preferences, such as your terminal theme, font and type size.

What the App Reads

Whatever your own machines send back over the SSH connection you opened: terminal output, and the workspace, tab and pane structure of a herdr session if you are running one. It is fetched to be drawn on screen. Drover keeps no history of it, builds no profile from it, and uploads none of it.

Where Your Data Lives

On your device and on your own machines — nowhere else. Drover has no cloud component of any kind: no iCloud sync, no remote database, no crash reporting, no telemetry. If a host is not reachable from your device, Drover shows you nothing, because there is no copy anywhere else to fall back on.

Host Key Checking

Drover remembers the key a host presents the first time it sees it, and stops hard if that key ever changes — the standard defence against someone impersonating your machine. That comparison happens entirely on your device, against keys stored on your device. No key registry of mine exists to consult.

Third-Party Services

None. Drover integrates no analytics, advertising, attribution, or data-collection service. Its third-party code is SwiftNIO SSH and SwiftTerm, both open source, both running entirely on your device, and neither contacting anything but the hosts you configured.

Deleting Your Data

Removing a host deletes its stored details and any credential kept for it. Deleting the app removes everything Drover has kept, since all of it lives in the app’s own storage and the device keychain. Nothing survives elsewhere for you to request the deletion of — the data on your machines is, and always was, yours.

Children’s Privacy

Drover does not knowingly collect any information from anyone, including children under the age of 13.

Changes to This Policy

If this policy changes in the future, the updated version will be posted at this URL with a revised “last updated” date.

Contact

If you have any questions about this privacy policy, you can reach me at cunderw.dev/contact.