Moderno Terminal — SSH & SFTP is an SSH client and SFTP file manager for Android, published by Veridion LLC. It does not collect your data. There is no account, no sign-up, no analytics, and no server operated by us. The same policy covers the app on Apple platforms, where it is published as SSH Terminal & SFTP.
Last updated: 23 August 2026
To do its job the app saves the following on your device only: the connection profiles you enter (hostname, port, username, and a display name), your preferences, and the host-key fingerprints it pins the first time you trust a server. These live in the app's own private storage. Deleting the app deletes them.
If you choose to save a password or an SSH private key, it is encrypted with a hardware-backed key in the Android Keystore and released only after your fingerprint, face, or device credential unlocks it. It is used solely to authenticate to the servers you name, and is never sent to us or to anyone else. You can remove it at any time by forgetting the host or deleting the app.
No accounts and no sign-up. No analytics, no telemetry, and no crash-reporting service. No advertising, and the app does not request or use an advertising ID. No third-party tracking SDKs. The app opens no connection to us, ever — the only connections it makes are the SSH connections you ask for and, if you switch on the optional AI assistant described below, requests to the AI provider you choose.
The app connects directly from your device to the SSH and SFTP servers you configure. The commands you run and the files you move travel between your device and those servers over an encrypted SSH connection. We have no access to that traffic and no record that it happened. The servers themselves are operated by you or by third parties, under their own policies rather than this one.
The app includes an optional assistant that can explain terminal output or suggest a command. It is off until you turn it on in Settings, and it stays off after an update. While it is off, no terminal content leaves your device for this purpose and the feature's button does not appear.
If you turn it on, you supply the endpoint and your own API key — we do not provide a model, an account, or a proxy, and your requests never pass through us. When you press Explain or Suggest a command, the app sends the recent terminal text shown in the panel to the provider you named. That company receives it and handles it under their privacy policy and terms, not this one. Choosing a model on your own network keeps the text on your network.
Before anything is sent, the app removes text that looks like a
secret — passwords, private keys, tokens, API keys, and
credentials in URLs — and replaces it with [redacted].
This is a filter for the shapes secrets usually take, not a guarantee
that every secret is caught, which is why the panel shows you the exact
text first and sends nothing until you press a button.
Your API key is encrypted with a hardware-backed key in the Android Keystore and is sent only to the endpoint you configured. Plain HTTP is refused for anything outside your own network, so the key is not transmitted unencrypted across the internet. The app keeps no copy of your questions or the answers once the panel is closed.
Uploads and downloads go through Android's own file picker. The app receives access to exactly the file or folder you select, for that transfer, and it reads no other storage on your device.
The free tier saves up to three hosts and includes the whole terminal. A single one-time purchase lifts that limit and unlocks the SFTP file manager, sold through Google Play Billing. Google processes the payment and tells the app only whether the purchase is owned. The app never sees your name, your payment details, or your Google Account. Google's handling of that transaction is covered by Google's own privacy policy.
Internet and network state to reach the servers you configure. Biometric to unlock saved credentials. Foreground service so a running session is not killed while the app is in the background. Notifications to show that a session is still open. The app requests no location, contacts, camera, microphone, or broad storage access.