Privacy Policy

The SigilTTY app

SigilTTY is built so that your data stays yours:

• No analytics, no tracking, no ads. The app contains no analytics or advertising SDKs and does not send usage data to us or to third parties.
• Connection data stays in your iCloud. Server profiles, folders and snippets are stored on your devices and, if you use iCloud, synced through CloudKit in your private iCloud database. We do not operate servers that see this data.
• Credentials live in Keychain. Passwords, private keys and passphrases are stored in the system Keychain. If you enable credential sync, regular credentials sync via iCloud Keychain, which is end-to-end encrypted by Apple. Biometric-protected private keys never leave the device.
• Local network access is requested only for Key Handoff — the encrypted device-to-device key transfer — and is used for nothing else.
• Voice dictation is on-device or bring-your-own-key. If you choose the on-device option, your speech is transcribed by Apple’s speech recognition on the device itself and the audio is not transmitted anywhere — not to us, and not to Apple. If instead you configure a third-party transcription service, recorded audio streams directly from your device to that service and nowhere else — we never receive it, and that service handles the audio under its own privacy policy. In both cases audio is processed in memory and never written to disk, and any API keys you enter are stored in the system Keychain.
• Offline agent notifications are end-to-end encrypted. If you enable them, a helper on your server encrypts each alert to your device’s key before it is sent. Our push relay — the only service of ours the app talks to — forwards an anonymous routing identifier and the ciphertext to Apple’s push service. It cannot read which agent, which server, or what happened; notifications are decrypted on your device. Registration requires no account, idle registrations are deleted automatically, and turning the feature off removes the helper from your server. Both the helper and the relay areopen source and open to security audit.
• Your terminal traffic goes directly from your device to your servers. It never passes through infrastructure we control.

This website

This website is a static site. It does not use analytics, does not set cookies, and does not include third-party trackers. If you email us for support, we use your email address and message only to respond to you.

Contact

Questions about this policy:support@sigiltty.com