KoKo Privacy Policy

Effective date: 2026-09-20 · Developer: individual (Apple Developer Program)

KoKo is a native iPhone SSH terminal. You connect to your own Linux server to run AI coding agent CLIs — including Cursor Agent, Claude Code, OpenAI Codex CLI, and Google Gemini CLI. KoKo does not operate its own backend or account system.

1. What data KoKo stores on your iPhone

KoKo does not upload your SSH credentials, terminal output, or session content to servers operated by the KoKo developer. The app stores the following locally on your device:

SSH host profiles — name, address, port, username, project paths, and host key fingerprints (TOFU)
SSH credentials — passwords or private keys, stored in the iOS Keychain (accessible only while the device is unlocked, on this device only)
SSH key metadata — label, algorithm, and public key text (private keys stay in Keychain)
Session metadata — display name, agent type, remote chat/session IDs, and timestamps (not full conversation transcripts)
Terminal scrollback — raw PTY output saved under the app’s Application Support folder
App preferences — UI language and terminal font size

2. How your data is used

Local data is used only to:

Open and maintain SSH connections to servers you configure
Render the terminal and restore scrollback
List, resume, and delete agent sessions on your server
Assist with agent CLI login flows (see Section 3)

SSH traffic travels directly between your iPhone and the server you specify. It does not pass through a KoKo-operated relay or cloud service.

3. Third-party services and your server

KoKo does not integrate advertising, analytics, crash-reporting, or social SDKs.

When you use an agent on your server, that CLI and its accounts are separate from KoKo:

Cursor Agent — runs on your server; login may open Cursor’s website in Safari
Claude Code — runs on your server; login may open Anthropic’s website in Safari
OpenAI Codex CLI — runs on your server; device-auth login may open OpenAI’s website in Safari
Google Gemini CLI — runs on your server; login may open Google’s website in Safari

KoKo does not store Cursor, Anthropic, OpenAI, or Google account credentials. Those services are governed by their own privacy policies. Any API calls or data processing by an agent CLI happen on your server and with those providers — not with the KoKo developer.

If you choose to install a missing CLI, KoKo may run install commands on your server (for example via official install scripts or npm). That can cause your server to download software from third-party hosts such as cursor.com, claude.ai, chatgpt.com, or registry.npmjs.org.

During login or setup, KoKo may copy URLs or codes to the system clipboard, or open a login page in your browser, at your direction.

4. Session sync and deletion

When you refresh the session list, KoKo runs commands over SSH on your server to read agent metadata (for example under ~/.cursor, ~/.claude, ~/.codex, or ~/.gemini) and detect active GNU screen sessions. This metadata is merged into local session records on your iPhone. KoKo does not send this information to the developer.

When you delete a session in the app, KoKo stops the remote agent or screen session and removes related metadata on your server, then deletes the local session record and scrollback. Server-side deletion may be irreversible — back up important work on your server if needed.

5. Public key setup

If you use the in-app public key installer, KoKo connects with your existing SSH credentials, adds your public key to ~/.ssh/authorized_keys on the server, and may attempt (with your password via sudo) to enable public-key authentication in SSH server configuration. Keys are sent only to the server you specify, not to KoKo’s developer.

6. Sharing

We do not sell, rent, or share your SSH credentials, terminal content, or local configuration with third parties. We will not disclose your data except where required by law.

7. Retention and deletion

Data on your iPhone remains until you remove it. You can delete hosts, keys, and sessions in the app; deleting a session also clears its local scrollback. Uninstalling the app or clearing its data in iOS Settings removes local profiles, Keychain entries, and scrollback files.

8. Children

KoKo is not directed at children under 13. We do not knowingly collect children’s data.

9. Contact

Questions about this policy: use the support channel listed on the App Store listing or the GitHub repository for this project.

KoKo 隐私政策

生效日期：2026-09-20 · 开发者：个人开发者（Apple Developer Program）

KoKo 是一款 iPhone 原生 SSH 终端。你通过 SSH 连接自己的 Linux 服务器，运行 AI 编程 Agent 命令行工具，包括 Cursor Agent、Claude Code、OpenAI Codex CLI 与 Google Gemini CLI。KoKo 不运营自有后端或账号系统。

1. KoKo 在 iPhone 上存储哪些数据

KoKo 不会将你的 SSH 凭据、终端输出或会话内容上传到 KoKo 开发者运营的服务器。应用仅在你的设备本地保存：

SSH 主机配置 — 名称、地址、端口、用户名、项目路径，以及主机指纹（TOFU）
SSH 凭据 — 密码或私钥，保存在 iOS Keychain（仅在本机、设备解锁时可访问）
SSH 密钥元数据 — 标签、算法与公钥文本（私钥仅存于 Keychain）
会话元数据 — 显示名称、Agent 类型、远端 chat/session ID 与时间戳（不含完整对话正文）
终端 scrollback — 原始 PTY 输出，保存在 App 的 Application Support 目录
应用偏好 — 界面语言与终端字号

2. 数据如何使用

本地数据仅用于：

建立并维持到你配置的服务器的 SSH 连接
显示终端并恢复 scrollback
在你服务器上列出、恢复或删除 Agent 会话
辅助 Agent CLI 登录流程（见第 3 节）

SSH 流量直接在你的 iPhone 与你指定的服务器之间传输，不经过 KoKo 开发者的中转或云服务。

3. 第三方服务与你的服务器

KoKo 不集成广告、分析、崩溃上报或社交媒体 SDK。

你在服务器上使用的 Agent CLI 及其账号与 KoKo 相互独立：

Cursor Agent — 在你的服务器上运行；登录时可能在 Safari 中打开 Cursor 网站
Claude Code — 在你的服务器上运行；登录时可能在 Safari 中打开 Anthropic 网站
OpenAI Codex CLI — 在你的服务器上运行；设备码登录时可能在 Safari 中打开 OpenAI 网站
Google Gemini CLI — 在你的服务器上运行；登录时可能在 Safari 中打开 Google 网站

KoKo 不存储 Cursor、Anthropic、OpenAI 或 Google 的账号凭据。这些服务受其各自隐私政策约束。Agent CLI 发起的 API 请求与数据处理发生在你的服务器及对应服务商之间，与 KoKo 开发者无关。

若你选择安装缺失的 CLI，KoKo 可能在你的服务器上执行安装命令（例如官方安装脚本或 npm）。这可能导致服务器从 cursor.com、claude.ai、chatgpt.com、registry.npmjs.org 等第三方地址下载软件。

在登录或配置过程中，KoKo 可能应你的操作将 URL 或验证码复制到系统剪贴板，或在浏览器中打开登录页面。

4. 会话同步与删除

当你刷新会话列表时，KoKo 通过 SSH 在你的服务器上读取 Agent 元数据（例如 ~/.cursor、~/.claude、~/.codex、~/.gemini 下的目录），并检测活跃的 GNU screen 会话。这些元数据会合并到 iPhone 上的本地会话记录中，不会发送给开发者。

在 App 中删除会话时，KoKo 会停止远端 Agent 或 screen 会话，并删除你服务器上的相关元数据，随后删除本机会话记录与 scrollback。服务器端删除可能不可恢复，请在需要时自行备份服务器上的重要数据。

5. 公钥安装

若使用 App 内公钥安装功能，KoKo 会以你现有的 SSH 凭据连接，将你的公钥写入服务器的 ~/.ssh/authorized_keys，并可能（通过 sudo 使用你保存的 SSH 密码）尝试在 SSH 服务配置中启用公钥登录。公钥仅发送到你指定的服务器，不会发送给 KoKo 开发者。

6. 数据共享

我们不会出售、出租或向第三方共享你的 SSH 凭据、终端内容或本地配置。除非法律要求，否则不会披露你的数据。

7. 数据保留与删除

iPhone 上的数据会保留至你主动删除。你可在 App 中删除主机、密钥与会话；删除会话会同时清除对应的本地 scrollback。卸载 App 或在 iOS 设置中清除 App 数据，会移除本地配置、Keychain 条目与 scrollback 文件。

8. 儿童隐私

KoKo 不面向 13 岁以下儿童，我们不会故意收集儿童数据。

9. 联系

如有隐私问题，请通过 App Store 页面或本项目 GitHub 仓库中的支持渠道联系。