1. Scope
This policy applies to the Hobgoblin Android application published by MRongM. It does not control an SSH server, Git host, network provider, Android system service, or third-party application that you choose to use with Hobgoblin.
2. Data MRongM does not collect
Hobgoblin has no MRongM-operated application backend and includes no advertising, analytics, or crash-reporting SDK. MRongM does not receive app account data, telemetry, advertising identifiers, terminal contents, repository contents, SSH credentials, or device information from the app.
3. Information stored on your device
To provide features you request, Hobgoblin stores host aliases, host addresses, usernames, ports, remote paths, trusted host-key fingerprints, port-forward rules, display preferences, manual ordering, retained terminal metadata, and a bounded recent terminal-output snapshot in private app storage. Imported or generated SSH private keys are encrypted with AES-GCM using a key held by Android Keystore. A temporary server password used to install a public key is handled in memory for that attempt, cleared afterwards, and not saved by Hobgoblin.
4. Direct SSH connections
When you connect, commands, terminal input and output, repository metadata, remote paths, and related responses travel directly between your device and the SSH server you selected. SSH encrypts this traffic in transit. MRongM is not an intermediary and cannot read or retrieve it. The server owner and network provider may process data under their own policies.
5. Termux and clipboard
Termux integration is optional and only runs after your explicit action. When direct Termux command access is available, Hobgoblin may send an SSH command and the selected private-key material to the separately installed Termux app so it can start that session. If you choose Copy command, the SSH command is placed on the Android clipboard. Termux and other clipboard readers are governed by their own behavior and policies.
6. Notifications
While an interactive SSH terminal remains active, Hobgoblin uses an ongoing Android notification. It may show a terminal label and connection state. Visibility on the lock screen is controlled by your device notification settings.
7. Sharing
MRongM does not sell or share data received from the app because MRongM does not receive such data. Data reaches a user-selected SSH server, Termux, or the clipboard only as described above and only to perform an action you initiate. Information may also be disclosed if MRongM is legally required to respond to a valid request, but MRongM cannot disclose app data it does not possess.
8. Retention and deletion
Local records remain until you delete them with available in-app controls, clear Hobgoblin storage in Android settings, or uninstall the app. Clearing storage or uninstalling removes Hobgoblin's remaining local application data. Ending or deleting a Hobgoblin record does not delete files, Git repositories, shell history, authorized keys, or tmux sessions on your SSH server unless the app explicitly previews and you approve that separate remote operation. MRongM keeps no server-side Hobgoblin account data and therefore has no server-side user record to delete.
9. Security
Hobgoblin uses Android private app storage, Android Keystore-backed encryption for stored private keys, SSH transport encryption, and explicit host-key trust. No system can guarantee absolute security. You are responsible for securing your device, SSH server, credentials, Termux installation, and network.
10. Children
Hobgoblin is a professional development tool intended for adults aged 18 and over. It is not designed for children and MRongM does not knowingly collect personal information from children through the app.
11. International use
Your device and chosen SSH server may be in different countries. You are responsible for ensuring that your use of SSH, cryptography, repositories, and remote systems complies with laws and organizational rules that apply to you.
12. Changes
This policy may be updated when Hobgoblin's behavior or legal obligations change. The effective date above will be revised, and material changes will be reflected on this page and in the app or store listing when required.
13. Contact
For privacy questions, contact MRongM at jiangisright@gmail.com.