Effective 4 November 2026

Termight is an app for iPhone and Android developed by Anders Kruse, Denmark. This policy describes what happens to your data when you use it.

Contact: termight.app@gmail.com

Summary

The developer of Termight does not collect, store or sell your personal data. The app has no analytics, no advertising and no tracking. It connects your phone to your own GitHub account and your own codespaces, and what you do there stays between you, GitHub and the services you choose to use.

What stays on your phone

  • GitHub access tokens. On iPhone they are stored in the iOS Keychain, for this device only. On Android they are stored encrypted, with a key kept in the Android Keystore that never leaves the phone.
  • Settings. Appearance, your default agent, saved terminal commands, and the address and model name of a custom endpoint if you set one.
  • Agent sessions. The list of your sessions and their transcripts are saved in the app’s own storage so you can reopen them.
  • Sign-in cookies. When you sign in to an AI provider inside the app, that provider’s cookies are kept in the app’s browser storage.
  • Pages you open in the Preview. Their cookies and stored data are kept in the app’s browser storage until you sign out.

None of this is sent to the developer. On iPhone, your settings, sessions and browser storage are included in the backups you make of your own phone. The GitHub tokens are not: they stay on the device they were saved on, and on a new or restored phone you sign in again. On Android, nothing the app stores goes into a backup or a transfer to a new phone; there you sign in again.

What leaves your phone, and where it goes

GitHub. The app talks directly to GitHub to sign you in, list your repositories and codespaces, and start, stop and create codespaces. Your terminal input and output, the files you open and edit, and your agent conversations travel between your phone and your codespace over an encrypted connection through GitHub’s Codespaces infrastructure, which GitHub and Microsoft operate. GitHub’s handling of your data is described in the GitHub Privacy Statement.

The sign-in helper. When you choose “Sign in with GitHub”, GitHub gives the app a one-time code. The app sends that code to a small service run by the developer on Cloudflare, which adds the app’s credentials and passes the request on to GitHub. GitHub’s answer, your access token, is passed straight back to your phone. The service handles the code and the token only for the moment the request takes. It does not log them or store them. Cloudflare, as the hosting provider, processes the request and with it your IP address, as any web host does.

If you sign in with a personal access token instead, the token goes only to GitHub.

API keys for AI providers. If you enter an API key, the app encrypts the key on your phone and saves it as a GitHub Codespaces secret in your own GitHub account. The key is not kept on your phone and is never sent to the developer.

Signing in to an AI provider with a subscription. If you sign in to an AI provider from the app, with a Claude or a ChatGPT subscription, the sign-in is stored in your codespace, so that the codespace is signed in. A ChatGPT sign-in is kept by the agent you signed in to, in its own files in your home directory there (~/.codex/auth.json for Codex, ~/.local/share/opencode/auth.json for opencode). A Claude sign-in is a token the app writes to a file in your home directory there (~/.codescape/claude-oauth-token) and to your shell startup files, which load it; if you choose to remember it for new codespaces, it is also saved as a GitHub Codespaces secret in your own GitHub account. A sign-in stays in the codespace until you remove it, or until the codespace is rebuilt or deleted. It is not kept on your phone and is never sent to the developer.

AI providers. When you run a coding agent, the agent runs inside your codespace. Your prompts, and the files and command output the agent reads, are sent from your codespace to the AI provider you chose (for example Anthropic, OpenAI, OpenRouter or a custom endpoint), under your own account or API key with that provider. The provider’s own privacy policy applies. Agents may also keep their own history inside your codespace.

Purchases. Termight Pro is bought through the App Store on iPhone and through Google Play on Android. Apple or Google handles the payment, and the developer does not receive your card or bank details. The app only asks the store whether your Apple Account or Google account has the subscription, and sends nothing about it to the developer.

Apple. If you have agreed on your device to share analytics with app developers, Apple may give the developer anonymous crash and usage statistics. You control this in Settings → Privacy & Security → Analytics & Improvements.

Google. If you allow your Android phone to share usage and diagnostics data with Google, Google Play may give the developer crash reports and performance statistics that do not identify you. You control this in your phone’s Google settings, under Usage & diagnostics.

Sharing

The developer has no personal data from the app to share and shares none.

Removing your data

  • Sign out in Settings. This deletes the GitHub tokens from your phone. On iPhone, do this before deleting the app, because iOS can keep Keychain items after an app is removed. On Android, deleting the app deletes the tokens too.
  • Revoke the app’s access at github.com/settings/applications. After that the app can no longer reach your GitHub account.
  • Delete saved API keys on GitHub under Settings → Codespaces → Secrets, or from the app’s Settings.
  • Remove an AI provider sign-in from a codespace. For Claude: Settings → Providers → Claude Subscription in the app. For ChatGPT: run codex logout or opencode auth logout in the Terminal tab. This deletes what is stored in that codespace. It does not cancel the sign-in with the provider.
  • Delete the app to remove its settings, session lists and transcripts from your phone.
  • Delete your codespaces on GitHub to remove what is stored in them.

Your rights

If you write to the contact address, your email is kept only as long as needed to answer you. You can ask to see, correct or delete it at any time. Under the EU General Data Protection Regulation you also have the right to complain to a data protection authority; in Denmark that is Datatilsynet.

Children

Termight is a tool for software developers and is not directed at children. GitHub requires its users to be at least 13 years old.

Changes

If this policy changes, the new version will be published on this page with a new date.