Wenbo Qiu（以下简称"我们"）非常重视您的个人信息与隐私保护。本《隐私政策》旨在向您说明，当您使用 Bolt SSH（以下简称"本应用"）时，我们如何收集、使用与保护您的相关信息，以及您所享有的权利。
| 场景 | 收集的信息 | 用途 | 存储位置 |
|---|---|---|---|
| 主机管理 | 主机 IP、端口、用户名、标签名称、标记颜色（不含密码，除非您主动开启"保存密码"） | 在设备本地保存主机列表 | 设备本地（SharedPreferences） |
| SSH 密钥 | 您导入的私钥文件内容 | 用于 SSH 密钥认证 | 设备系统 Keychain（加密存储） |
| 保存的密码（可选） | 您主动开启"保存密码"时的登录密码 | 免去每次连接时手动输入 | 设备系统 Keychain（加密存储） |
| 应用锁 | 应用锁开关状态 | 下次启动时决定是否需要 Face ID / 指纹验证 | 设备本地 |
| 匿名使用统计 | 应用内行为事件（如：打开应用、连接尝试成功/失败、新建/关闭标签、导入/删除密钥等），不含任何可识别您身份的信息 | 了解功能使用情况，指导产品改进 | 我们自托管的 Pulse 统计服务（pulse.wondergarden.top） |
您在终端中输入的命令及服务器的响应内容直接在您的设备与您自己的 SSH 服务器之间传输，采用 SSH 协议加密，不经过我们的任何服务器，我们无法访问这些内容。
主机密钥（Host Key）的哈希值存储在设备本地，用于连接时的 TOFU（首次信任）验证，防止中间人攻击，同样不上传至我们的服务器。
| 第三方 | 用途 | 涉及的信息 |
|---|---|---|
| Apple（内购，上线 Pro 后启用） | App Store 一次性购买与支付 | 交易凭证 |
| 自托管 Pulse 统计 | 匿名使用统计 | 匿名行为事件（见上表） |
本应用主要面向成年专业用户。我们不会主动向未成年人收集个人信息。
我们可能适时修订本政策并更新"生效日期"。对于重大变更，我们会通过应用内提示告知。继续使用即视为接受修订后的政策。
Wenbo Qiu ("we", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use Bolt SSH (the "App"), and the rights you have over that information.
| Scenario | Information | Purpose | Storage |
|---|---|---|---|
| Host management | Host IP, port, username, label, color tag (passwords excluded unless you enable "Save password") | Store host list locally on device | On-device (SharedPreferences) |
| SSH keys | Private key file content you import | SSH key authentication | System Keychain (encrypted) |
| Saved password (optional) | Login password, when you explicitly enable "Save password" | Skip manual password entry on connect | System Keychain (encrypted) |
| App Lock | App lock on/off state | Determine whether Face ID / fingerprint is required at next launch | On-device |
| Anonymous usage analytics | In-app behavior events (e.g. app open, connection success/failure, tab and key management actions) — no personally identifiable information | Understand feature usage to guide product improvements | Our self-hosted Pulse analytics (pulse.wondergarden.top) |
Commands you type and server responses travel directly between your device and your own SSH server, encrypted by the SSH protocol. They do not pass through our servers and we have no access to them.
Host key fingerprints are stored locally on your device for TOFU (Trust On First Use) verification, protecting against man-in-the-middle attacks. They are never uploaded to our servers.
| Third party | Purpose | Information involved |
|---|---|---|
| Apple (IAP, enabled when Pro launches) | App Store one-time purchase and payment | Transaction receipts |
| Self-hosted Pulse analytics | Anonymous usage statistics | Anonymous behavior events (see table above) |
The App is intended primarily for adult professional users. We do not knowingly collect personal information from minors.
We may revise this Policy from time to time and update the "Effective" date. For material changes we will notify you via an in-app notice. Continued use after a change takes effect constitutes acceptance.