HopshellPrivacy Policy
The short version
- Hopshell has no account and no Binky Labs server. We do not collect your data.
- No ads, no analytics, no tracking.
- Your hosts, passwords and keys are stored encrypted on your phone. Binky Labs never receives them.
- Text is sent to an AI service only when you ask, and only to the one you chose.
What stays on your phone
Saved hosts, user names, passwords, key passphrases, SSH private keys, known host keys, API keys and settings are stored only on your device. Secrets are encrypted. Android cloud backup is turned off for Hopshell, so this data is not copied to Google.
If you make a backup, Hopshell writes an encrypted file (AES-256-GCM, protected by a password you set) to a place you pick. Private key files and API keys are never put in backups. You decide whether saved passwords go in.
Your servers
Hopshell connects straight from your phone to the servers you add, over SSH. Whatever you type and see in the terminal goes between your phone and your server only.
AI features
AI is optional. Nothing is sent unless you tap Explain, Ask or a similar AI action. When you do, Hopshell sends the text you selected or typed, the current folder of the tab, and your server's operating system name to the service you chose:
- Host claude or host codex: the request goes to your own server, which runs the
claudeorcodexprogram you installed there. That program then sends it to Anthropic or OpenAI under your own account. - API key providers (for example Anthropic, OpenAI, Google Gemini, OpenRouter or a custom address you enter): the request goes straight from your phone to that provider, using your key.
Those services handle your request under their own privacy policies. Some free tiers, such as Google's free Gemini tier, may use prompts to improve their products. Binky Labs never receives these requests.
Purchases
Subscriptions are sold and billed by Google Play. Hopshell receives only whether your subscription is active. Binky Labs never sees your payment details. Google's privacy policy applies to the purchase.
Permissions
- Internet and network state: to connect to your servers and, when you ask, AI services.
- Notifications and foreground service: to keep connections alive in the background and, if you turn it on, alert you to a terminal bell.
- Biometric: optional app lock. Android checks your fingerprint or face; Hopshell never sees it.
Deleting your data
Uninstalling Hopshell, or clearing its storage in Android settings, deletes everything Hopshell stored. There is no copy on any Binky Labs server. Backup files you made stay where you saved them until you delete them.
Children
Hopshell is a tool for managing servers and is not aimed at children under 13.
Changes
If this policy changes, the new version will be posted here with a new effective date. Before any feature that sends data to Binky Labs ships, this policy will be updated to describe it.