Mussh

Privacy policy

Polska wersja

Last updated: 2026-10-20

The changes about cloud dictation (the “Cloud dictation” section and the passages that refer to it) take effect on 2026-11-03. Until then, the version effective from 2026-10-16 applies; the rest of the policy has not changed.

This policy covers the Android and iPhone app with the identifier app.mussh on Google Play and the App Store (the "app"). Publisher and data controller: FORTNIGHT AI LTD (company number 17085717, registered in England and Wales), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Privacy contact: support@mussh.app.

Summary

  • The app has no user accounts and no ads, and it contains no analytics or advertising SDK. The publisher's only server is a small cloud dictation broker used by the full version (see “Cloud dictation”). The only statistics the publisher sees are about purchases, from RevenueCat (see “Purchase of the full version”).
  • Everything you do in the app (terminal, agent fleet, chat, files, photos) travels over an encrypted SSH connection directly between your phone and your own computer (the "host"). The publisher has no access to it.
  • Apart from your host, data leave the phone only for the purchase of the full version and the free trial, handled by Google Play (or the App Store) and RevenueCat, and when you dictate: in the full version to Deepgram through the publisher's broker on Cloudflare, during the trial and without the full version to the phone's system speech recognition service (see “Cloud dictation” and “Phone permissions”).

Data stored on the phone

The app keeps in its private storage on the phone: your host list (address, port, user, name), host key fingerprints, settings, the date of first launch or, on iPhone, the start date of the free trial in the App Store (to count the trial) and whether the full version was purchased. SSH passwords and keys are saved only if you choose so, encrypted with a key from the phone's key store (Android Keystore, Secure Enclave). The phone key is created inside the key store and cannot be read out of it. The chat also keeps on the phone message drafts with copies of attached files (up to 14 days after the last change), messages waiting to be sent to an agent, files shared from other apps until you use them, and cached copies of files opened from the host; JPEG, PNG and WebP photos lose their metadata, including GPS location, before they are sent to the host. The app excludes these data from backups, and uninstalling the app deletes them. On Android, the date of first launch and the times the trial was last checked are also kept on the phone in Google Play services' Block Store, without a cloud copy, so reinstalling the app does not restart the trial; they are never sent to the publisher. On iPhone, iOS still includes the app's settings and its record of the free trial and the purchase in the device backup you make in iCloud or on a computer; your host list, saved passwords and keys are not included. iOS may keep saved passwords and keys in the keychain after the app is removed.

Connection to your host

The app connects only to hosts you add yourself. Session content (terminal screen, agent states, conversations with agents, files and photos sent from the phone) passes only through the encrypted SSH connection between the phone and the host and is stored on your host, under your control. The publisher does not receive or process it.

Phone permissions

  • Camera: scanning the QR code when pairing with a host, and photos you send to your host. Images go nowhere else.
  • Microphone and speech recognition: dictating messages. In the full version, Deepgram turns speech into text (see “Cloud dictation”); during the trial, without the full version, after the monthly limit or without a network connection, the phone's system speech recognition service does it (usually Google on Android, Apple on iPhone) under its provider's terms. The app does not store recordings.
  • Biometrics: fingerprint, face or PIN before the phone key is used, if you turn it on. The app receives only the system's yes/no result, never biometric data.

Purchase of the full version

Payment is handled by Google Play (the App Store on iPhone) under Google's (Apple's) terms and privacy policy. The publisher never sees your card details or your store account's email address. The Google Play billing library in the app sends Google technical data about the purchase flow, also under Google's terms. On iPhone the 30-day trial is a free App Store product: starting it is recorded as a transaction in the App Store and in RevenueCat, so reinstalling the app does not restart it.

The purchase status is checked by RevenueCat (RevenueCat, Inc., USA), acting on the publisher's behalf. When the app starts or checks the trial, and at purchase, RevenueCat receives: a random, anonymous customer identifier created by the RevenueCat library in the app, purchase data from the store (product identifier, purchase token and transaction history, on iPhone including the start of the free trial), app and system version, device brand and model, store country, the phone's preferred languages and IP address; on iPhone also the identifier that Apple gives the publisher's apps on this phone (identifier for vendor, IDFV). These data are used to confirm the purchase, restore it after reinstalling and handle refunds, and to give the publisher purchase statistics in RevenueCat (for example the number of trials and purchases and revenue by country). In the App Store and Google Play forms this is declared as purchase history used for app functionality and analytics. The publisher does not link these data to your identity and does not use them for tracking or advertising. The app does not send RevenueCat your name, email address, advertising identifier or any session content. Transfers to the USA rely on standard contractual clauses. RevenueCat's policy: https://www.revenuecat.com/privacy

Cloud dictation

In the full version, dictation uses the Deepgram speech recognition service (Deepgram, Inc., USA), acting on the publisher's behalf. When you tap the microphone, the app asks the publisher's broker (a small server on Cloudflare, Cloudflare, Inc., USA) for a single-use token valid for 60 seconds. The broker receives the anonymous RevenueCat customer identifier (the same one used for the purchase), checks with RevenueCat that the full version is purchased, and counts dictation minutes per month (up to 300). It also receives the app's interface language, so that Deepgram recognises speech in that language. It stores the identifier, the minutes used in the current month and the identifier of the last session; your phone's IP address appears in Cloudflare logs kept for at most 7 days.

Microphone audio goes from your phone directly to Deepgram over an encrypted connection, only while you dictate, and Deepgram returns the text. Deepgram sees the audio and your phone's IP address, but not the customer identifier. Deepgram keeps the audio only as long as needed to process it and does not use it to train models. The app does not store recordings. Transfers to the USA rely on standard contractual clauses. Policies: https://deepgram.com/privacy and https://www.cloudflare.com/privacypolicy/

During the trial, without the full version, after the monthly limit and without a network connection, dictation uses the phone's system speech recognition service (see “Phone permissions”), and neither the broker nor Deepgram receives anything.

Legal basis and retention

Purchase data are processed to perform the sales contract for the full version (Art. 6(1)(b) GDPR), to meet accounting obligations (Art. 6(1)(c) GDPR) and, for purchase statistics, on the basis of the publisher's legitimate interest in understanding the app's sales (Art. 6(1)(f) GDPR), for as long as these purposes require. Cloud dictation data are processed to perform the contract (a full version feature, Art. 6(1)(b) GDPR): audio only while it is recognised, the minute counter until the end of the month, broker logs for at most 7 days. Data stored on the phone stay with you until you uninstall the app.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO). For purchase data, write to support@mussh.app; because the app has no accounts, please include the purchase date or the store order number.

Children

The app is a tool for people who work with computers over SSH and is not directed at children.

Changes

A new version of this policy will appear in the app and at the same address, with a new effective date.