Shell22
DE
Notify me
Menu

This is a convenience translation. The German version is legally binding.

Privacy policy

Last updated: November 2026

In brief: Shell22 does not collect data about you. There is no user account, analytics, advertising or tracking. What you create in the app stays on your device and syncs through your private iCloud when enabled. Connections go directly to the servers you choose.

1. Controller

The controller within the meaning of Article 4(7) GDPR is:

Simon Raach
Beethovenstraße 19
72829 Engstingen
Germany
Email: hello@shell22.de

2. Data on your device

The app initially stores configuration and content on your device. If you are signed in to iCloud and have not disabled iCloud for Shell22, the app syncs servers, groups, snippets, workflows and public key data through your private CloudKit database. This also includes the latest workflow run status and up to 128 KB of output per workflow. This data is stored in your iCloud account with Apple; we do not operate a sync server. You can disable syncing in iOS Settings under your name → iCloud. Passwords, private SSH keys and trusted host keys remain in the device-bound Keychain and are not synced.

Workflows store their latest run state and up to 128 KB of output; this data also syncs when iCloud is enabled. Downloaded files initially remain temporarily on your device; when you save or share them, they go to the location you choose.

Command explanations with Apple Intelligence process the text you choose using the on-device language model. They do not run commands or send text to a cloud AI service.

3. Connections to your servers

The app establishes SSH connections, SFTP file transfers and port forwards directly to the servers you enter. We do not operate an intermediary server or receive any content. You or the relevant server operator are responsible for processing on your servers. The app does not send terminal content to an AI provider.

4. App Store and Pro purchase

Apple handles downloads and the optional Pro one-time purchase through the App Store. Apple is responsible for this processing; we do not receive payment details. The app only checks the purchase status confirmed by Apple on your device. For further information, see Apple’s privacy policy.

5. iOS permissions

  • Location (optional): To keep open SSH sessions running when switching apps, the app may use location services with your consent, only while sessions are open. Approximate location is sufficient. Location data is neither stored nor transmitted. The legal basis is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time in the app or in iOS settings.
  • Local network: Only to reach servers on your local network.
  • Face ID or Touch ID (optional): For app lock. iOS performs the check; the app receives only the result, not biometric data.
  • Notifications (optional): Generated locally on your device when a program in a session is waiting for you. We do not operate a push service. iOS may use silent notifications from Apple for iCloud sync. Local notifications can contain messages sent by programs; you can turn this off in the app, and iOS controls the Lock Screen preview.
  • Live Activities: Show the number and status of sessions, without host details or terminal content.
  • Shortcuts and Siri: The app provides iOS with the names of your servers and snippets for shortcuts. Apple processes Siri requests.

6. Support by email

If you contact us, we process your message and email address to respond to your enquiry (Article 6(1)(b) and (f) GDPR). You can review the app’s support report before sending and decide what to share. We delete messages once the enquiry is resolved and no statutory retention obligations apply.

7. This website

This website does not set cookies, use analytics or tracking services, or load external fonts or scripts.

The website runs on a virtual server operated by us at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit, the web server processes technically necessary data, in particular IP address, date and time of access, requested page, amount of data transferred, browser type and the previously visited page if your browser sends it, and stores it in server logs. This serves to deliver the website, keep it stable and secure, and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and technically error-free provision of the website. Server logs are kept only as long as necessary for secure operation and error analysis.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time. You may also lodge a complaint with a data protection supervisory authority, such as the authority in your German federal state. As the app does not transfer data about you to us, we generally only hold data from email enquiries.