Data on your Mac
TermCraft stores hosts, groups, snippets, known host keys and public keys encrypted in the app’s container. Passwords, private keys and the access token for AI agents are kept in the macOS Keychain. The activity log of AI agents stays on this Mac.
iCloud
If you turn on sync, TermCraft stores your library in your private iCloud database (CloudKit). All content is end-to-end encrypted, so neither Apple nor the developer can read it. Passwords and private keys sync through iCloud Keychain. Apple’s privacy policy applies to iCloud.
Connections and AI agents
TermCraft only connects to the hosts you add and to iCloud. The MCP server for AI agents is off by default and only reachable on this Mac at 127.0.0.1. TermCraft passes agents only the data of hosts you allowed for them, and never passwords or private keys. What an agent does with command output is the responsibility of its provider.
Notifications and Touch ID
TermCraft uses notifications only to point you to waiting approvals; they contain no commands or addresses. macOS checks Touch ID; TermCraft receives no biometric data.
In-app purchase
Apple processes the purchase of TermCraft Pro. TermCraft only learns from the App Store whether Pro is unlocked on your Apple Account and receives no payment details.
Contact
Marlon Lange, support@termcraft.app. Full contact details are in the imprint.
Last updated: November 2, 2026