Privacy Policy
TapShell is a Bring-Your-Own-Server app. Your prompts, your code, your terminal output, and your API keys never touch our infrastructure. They travel directly between your iPhone and the open-source TapShell server running on your own Mac or Linux machine.
We do not sell your data. We do not use your data to train AI models. We do not run ads. We do not even have a backend that sees your content.
1. Who we are
TapShell is developed and distributed by Zheng Junling ("we", "us", "developer"), an individual developer based in Beijing, China.
Contact: tapshell.app/support · github.com/tapshell
2. What TapShell does
TapShell is a native iOS app that connects to the open-source TapShell server (github.com/tapshell). You run the server on your own Mac or Linux machine. TapShell on your iPhone talks directly to that server — no intermediate cloud.
3. What we collect
3.1 Things that stay on your device and your server
The following never leaves the direct connection between your iPhone and your own server:
- Prompts, code, and terminal output
- File contents you upload
- Voice recordings (transcribed on your own server, not sent to us)
- Your server URL and password/token
- Your Claude Code / agent API keys (stored only on your server)
3.2 Things App Store Connect shares with us
When you purchase or subscribe through Apple In-App Purchase, Apple shares with us:
- Transaction ID (anonymous, for subscription validation)
- Subscription status (active / expired / cancelled)
- Country / currency of purchase
We do not receive your name, email, payment method, or Apple ID through this channel.
3.3 Optional analytics (you can turn off)
If you leave the default enabled, TapShell collects anonymous, aggregated usage metrics:
- App version, iOS version, device model
- Crash logs (via Apple's built-in crash reporting)
- Feature usage counts (e.g. "voice input used N times")
We never log the contents of prompts, code, output, or any other user-generated content. You can disable all analytics at any time in Settings → Privacy → Analytics.
3.4 Push notification tokens
If you enable push notifications, your device's Apple Push Notification Service (APNs) token is stored on your own server, not ours. Your server uses it to send you notifications through Apple's APNs service. We do not operate a push notification relay.
4. What we do NOT collect
- Your name, email, phone number, or address
- Your prompts, code, or AI conversation history
- Your API keys or credentials
- Your location
- Your contacts, photos, or files (except the ones you explicitly upload, which go directly to your server)
- Your browsing activity
- Device identifiers for advertising (IDFA)
5. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Apple App Store | Distribution, in-app purchase | Transaction ID, subscription status |
| Apple Push Notification Service (APNs) | Delivering push notifications routed by your own server | Device token (stored on your server) |
We do not use Google Analytics, Firebase, Facebook SDK, Mixpanel, Amplitude, or any other third-party analytics/tracking SDKs.
6. Data retention
- On our side: we retain subscription transaction IDs for as long as required by Apple and applicable tax law. We never retain any user content, because we never receive it.
- On your server: you control retention entirely. TapShell's open-source server stores terminal session history locally on the machine you run it on. You can delete it anytime.
7. Your rights
You have the right to:
- Access any data we hold about you (subscription records)
- Delete your account and data (by cancelling your Apple subscription and deleting the app)
- Opt out of analytics (in-app setting)
- Port your data (your terminal history lives on your server, portable by design)
To exercise any of these rights, contact tapshell.app/support.
8. Children's privacy
TapShell is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with data, contact us and we will delete it.
9. International users
TapShell is distributed globally through the Apple App Store. Subscription data is processed by Apple in accordance with Apple's privacy policy.
For users in the European Economic Area (EEA), we rely on legitimate interest (Art. 6(1)(f) GDPR) for subscription management and, where applicable, consent (Art. 6(1)(a)) for optional analytics.
For users in California (CCPA), we do not sell personal information.
10. Changes to this policy
We may update this policy from time to time. Material changes will be announced via an in-app notification and on tapshell.app/privacy. The "Last updated" date above reflects the most recent change.
11. Contact
- Support: tapshell.app/support
- Issues: github.com/tapshell/issues
- Twitter/X: @TapShellApp
隐私政策
TapShell 是一个"自备服务器"(Bring-Your-Own-Server)应用。你的提示词、代码、终端输出、API 密钥,永远不经过我们的服务器。它们只在你的 iPhone 和你自己运行的 TapShell 开源服务端(部署在你自己的 Mac 或 Linux 机器上)之间直接传输。
我们不出售你的数据。我们不用你的数据训练 AI 模型。我们不投放广告。我们根本没有一个能看到你内容的后端。
一、我们是谁
TapShell 由 郑俊领("我们"、"开发者") — 一位居住在中国北京的独立开发者 开发和分发。
联系方式:tapshell.app/support · github.com/tapshell
二、TapShell 做什么
TapShell 是一个原生 iOS 应用,连接到开源的 TapShell 服务端(github.com/tapshell)。你在自己的 Mac 或 Linux 上运行这个服务端,iPhone 上的 TapShell 和它直接通讯,中间没有云。
三、我们收集什么
3.1 永远停留在你的设备和你的服务器的东西
以下内容永远只在你的 iPhone 和你的服务器之间直接传输,不经过我们:
- 提示词、代码和终端输出
- 你上传的文件内容
- 语音录音(在你自己的服务器上转写,不发给我们)
- 你的服务器 URL 和密码/令牌
- 你的 Claude Code / Agent API 密钥(只存在你的服务器上)
3.2 App Store Connect 分享给我们的东西
当你通过 Apple 内购买或订阅时,Apple 会分享给我们:
- 交易 ID(匿名,用于订阅验证)
- 订阅状态(活跃 / 过期 / 已取消)
- 购买国家 / 货币
我们不会通过这个渠道收到你的姓名、邮箱、支付方式或 Apple ID。
3.3 可选分析(可关闭)
如果你保留默认开启,TapShell 会收集匿名、聚合的使用数据:
- App 版本、iOS 版本、设备型号
- 崩溃日志(通过 Apple 内置崩溃上报)
- 功能使用次数(例如"语音输入使用 N 次")
我们永远不记录提示词、代码、输出或任何用户生成内容的内容。你可以随时在 设置 → 隐私 → 分析 关闭所有分析。
3.4 推送通知 Token
如果你启用推送通知,设备的 Apple Push Notification Service (APNs) Token 会存储在你自己的服务器上,不是我们的。你的服务器通过 Apple APNs 给你发通知。我们没有推送中继服务器。
四、我们不收集什么
- 你的姓名、邮箱、电话或地址
- 你的提示词、代码或 AI 对话历史
- 你的 API 密钥或凭证
- 你的位置
- 你的联系人、照片或文件(除非你明确上传,且上传后直接到你的服务器)
- 你的浏览行为
- 广告设备标识符 (IDFA)
五、第三方服务
| 服务 | 用途 | 共享的数据 |
|---|---|---|
| Apple App Store | 分发、内购 | 交易 ID、订阅状态 |
| Apple 推送通知服务 (APNs) | 通过你自己的服务器路由的推送 | 设备 token(存在你的服务器) |
我们不使用 Google Analytics、Firebase、Facebook SDK、Mixpanel、Amplitude 或任何其他第三方分析/追踪 SDK。
六、数据保留
- 我们这边:我们保留订阅交易 ID,保留期限依 Apple 和适用税法。我们不保留任何用户内容,因为我们根本收不到。
- 你的服务器:完全由你控制。TapShell 开源服务端把终端会话历史存在你运行它的机器上,你可以随时删除。
七、你的权利
你有权:
- 访问我们持有的关于你的数据(订阅记录)
- 删除账号和数据(取消 Apple 订阅并删除 app 即可)
- 退出分析(app 内设置)
- 导出数据(你的终端历史本来就在你的服务器上,天然可导出)
行使任何权利,请联系 tapshell.app/support。
八、儿童隐私
TapShell 不面向 13 岁以下儿童。我们不会故意收集 13 岁以下儿童的数据。如果你发现有儿童向我们提供了数据,请联系我们,我们会删除。
九、国际用户
TapShell 通过 Apple App Store 全球分发。订阅数据由 Apple 按其隐私政策处理。
对欧洲经济区 (EEA) 用户,我们基于合法利益(GDPR 第 6(1)(f) 条)处理订阅管理,并在适用时基于同意(第 6(1)(a) 条)处理可选分析。
对加州用户 (CCPA),我们不出售个人信息。
十、政策变更
我们可能不时更新本政策。重大变更会通过 app 内通知和 tapshell.app/privacy 告知。上方的"最后更新"日期反映最近一次变更。
十一、联系
- 支持:tapshell.app/support
- 问题反馈:github.com/tapshell/issues
- Twitter/X:@TapShellApp