Privacy

Last updated 1 September 2026

The short version

The app has no account, no server, and no analytics. It does not send your data anywhere, because there is nowhere for it to send data to. Everything it remembers is stored on your device. This policy covers the app — Devrim on the App Store — and this website, which counts two things and is described at the end.

What is stored on your device

• Addresses you have opened and servers you have connected to, as a recent list.
• Per-server settings, including the command you asked to run on connecting.
• Key metadata — a label and a type — separately from the key itself.
• The fingerprint of each server's host key, so a change can be detected.
• The arrangement of your desks, so it can be restored the next time you open the app.
• A small picture of each desk, kept in the app's cache folder so the switcher can show it.

Secrets

Private keys and saved passwords are held in the iOS Keychain as items that require your presence — Face ID, Touch ID, or your passcode — to read. They are stored so that they never leave the device and are not included in iCloud Keychain or in device backups. Devrim reads them at the moment a connection needs them and at no other time.

Network connections

The app makes the connections you ask it to: SSH to the servers you name, and web requests to the sites you open. Two things happen without an explicit request: a site's icon is fetched so it can be shown in a tab, and Apple's App Store is contacted to check whether the app has been paid for. Neither carries anything about you beyond what any browser or App Store app sends.

Web pages you open are ordinary web pages. Whatever they collect is between you and them, exactly as in any browser — Devrim neither adds to it nor reads it.

Payments

Purchases and subscriptions are handled by Apple. Devrim never sees your payment details; it only asks Apple whether this Apple Account has an active entitlement.

Removing what it holds

Keys and saved passwords can be cleared from the app's own Keys and Passwords pages, in the drawer on the screen's right edge. Deleting the app takes the rest of what it stored with it. Because nothing is collected and nothing is sent anywhere, there is no copy held elsewhere to ask for, correct, export or have deleted — a request for your data would be answered with the contents of your own device.

This website

The site is static files served from a CDN. It sets no cookies, runs no third-party analytics, loads no script that watches you and has no accounts. The server keeps ordinary request logs, as any web server does.

Two things are counted on the server, because the app is advertised and the money spent on that has to be answerable: a visit that arrives through a campaign address such as /r/example, and a click on a download link. What is written down is the campaign's name and nothing else — no identifier, no address of yours, nothing that separates one visitor from another, and no attempt to tie an arrival to a click. The counts are totals; there is no record of a person in them.

A download link then carries that campaign name to the App Store as Apple's campaign token, and Apple reports how many downloads each campaign produced. Those reports are counts too. Apple's own privacy policy governs what happens once you are on the store.

Children

Devrim is a developer tool and is not directed at children.

Changes

If this policy changes, the date at the top changes with it, and a version that collects anything new will say so plainly rather than in an update note.

Contact

Questions about this policy, or about Devrim: hello@devrim.app — one person reads it.