Agent Terminal

The short version

  • Your terminals — what you type and what your programs print — stay on your computer and your mobile device. We never receive them.
  • On the free plan you need no account, and we hold nothing tied to your name or account: for notifications we keep your mobile device's push address, and our server logs briefly keep the IP addresses requests come from. Away from your private network, the free plan connects through public relays run by n0, which see some connection details: what n0 sees.
  • If you take the trial or buy Pro, we keep what is needed to run your account and our relays, listed below. We do not sell it, show ads, or run analytics.

Using the app without an account

Your mobile device pairs with your desktop directly over your private network, or through n0’s public relays when you are away from it. Projects, terminals and the list of paired mobile devices are stored on your desktop. Nothing else is sent to us, apart from notifications, below.

Completion notifications. When a long command finishes and your mobile device is asleep, the desktop app sends a notification through our server and Google's Firebase Cloud Messaging. The desktop encrypts it to a key only your mobile device holds, so neither we nor Google can read it: we see only that a notification was sent.

So that this works without an account, your mobile device registers its push address (a token Google issues to the app) with our server, and gives each desktop it pairs with a code that lets that desktop, and nothing else, send to it. We keep the push address and these codes with nothing tied to your name or account, and delete them when you remove that desktop, when you sign out, or after 90 days without use. The push address is unique to your mobile device, and like every request to our servers these arrive with an IP address, which our server logs keep for a short time to stop abuse and diagnose faults. Notifications are rate-limited on every plan, and Pro's limit is higher. You can turn notifications off in the app's settings.

The free plan’s remote access uses public relays

Away from your computer’s network, the free plan connects through public relay servers run by n0, the company behind iroh, the networking library Agent Terminal uses. n0 is a third party: we do not run these relays and have no control of them.

  • Your session is end-to-end encrypted: a relay passes it along but cannot read it. The relay sees both devices’ IP addresses, and n0’s lookup service records which relay each device is on.
  • n0 offers these relays free, with no uptime guarantee and unpublished speed limits. A relayed connection can be slow, drop, or not connect at all when they are busy or down.
  • n0 supports only recent versions of iroh on them. Keep Agent Terminal up to date, or remote access through them may stop working.
  • No relay is used on the same Wi-Fi, or whenever the two devices can connect directly.
  • Pro uses Agent Terminal’s dedicated relays instead. You can also run your own relay and set it on the desktop. Either way, n0’s relays and lookup service are not used: your devices find each other through the relays they share.

What we keep when you have an account

What Why
Your email addresses, and the id Google or GitHub gives your login if you sign in with them To sign you in, send sign-in codes, and attach purchases to your account
A fingerprint of a key your mobile device generates, your mobile device's name and platform To recognise your mobile device and show it in your device list
A one-way hash of your mobile device's ANDROID_ID (Android's per-app device identifier). Your mobile device hashes it before sending; we hash it again with a secret key, so the stored value matches nothing outside our database. We never receive the raw value. To recognise your mobile device after a reinstall, so it finds the computers it was paired with
Your computers' names and ids, and when each computer and mobile device was last seen To count devices against your plan and show your device list
Your computers' and mobile devices' network keys: the public half of the key each one connects with (its iroh EndpointId) To let your devices, and only while your plan covers them, through our dedicated relays
Your plan, its renewal date, and whether a payment failed — as reported by our billing provider To give you the access you paid for
IP addresses of requests to our servers, in server logs that are rotated and deleted on a short cycle To stop abuse and diagnose faults

Google user data

Agent Terminal uses Google only for Sign in with Google (scopes openid and email), and only when you choose it. When you sign in with Google in the app or on this website, Google gives us your Google account's id and your email address, and confirms the address is verified. We use them only to sign you in, to find your Agent Terminal account, and to email you about it (sign-in codes, billing). We do not receive your name, photo, contacts, files or any other Google data. You can revoke the app's access at any time at myaccount.google.com/permissions.

Sharing. We do not sell Google user data, share it with anyone, use it for advertising, or use it to train AI or machine-learning models. People at 4 Nuva do not read it, except with your permission, for security or abuse investigations, or where the law requires it.

Storage and deletion. Your Google account id and email are stored with your account on our servers until you delete your account or unlink Google; either removes them at once. Your Google password is never seen by the app or by us.

Agent Terminal's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

The remote connection

With Pro, your mobile device and desktop connect through Agent Terminal’s dedicated relays rather than n0’s. Our server keeps each device's network key and when each device was last seen, and our relay asks it, each time a device connects, whether your plan still covers that key. When a direct path is impossible, traffic is relayed through our relay encrypted end to end; we cannot read it, though the relay sees both devices’ IP addresses while it passes traffic, as any relay does. No relay is used when the two can connect directly. Pro, and a relay you run yourself, keep your devices off n0’s servers. A device's key is deleted with the device, or with your account.

Payments

In the app, Google Play or the App Store handles payment. On the website, 4 Nuva is the seller. Payment is processed by Stripe, and RevenueCat manages subscriptions for us. Stripe receives your payment details; we receive only the status of your subscription. Google, Apple, Stripe and RevenueCat each keep purchase records for as long as tax law requires, under their own privacy policies.

Sign-in codes are sent by Resend.

How long we keep it

Account data is kept until you delete your account. Deleting it removes your account, sign-in methods, devices and sessions at once.

A mobile device's push address, and the codes it gave its desktops, are deleted when you sign out or remove the desktop, and after 90 days in which no notification was sent to it.

We keep nothing of your account once it is deleted. Who may have the trial is decided by Google Play, the App Store or our payment provider, not by a record we keep.

Your rights

You can see your account and devices in the app, and delete your account in the app or on this website. For a copy of what we hold, or any other request, email [email protected]. If you are in the UK or the EU you may also complain to your data protection authority.

Children

Agent Terminal is not directed at children under 13, and we do not knowingly hold their data.

Changes

We will post changes here and update the date above. A material change will be announced in the app before it applies.

The security page covers how the connection is encrypted, and the support page answers the questions people ask first.