Privacy Policy

Last updated: September 29, 2026

This policy covers the Muxalot Android app (including the free and Pro editions) and the muxalot-agent server software, both published by Brian Tafoya.

Summary

Muxalot does not collect, store or share your personal data with the developer or any third party. The app has no accounts, no analytics, no advertising and no crash reporting. It connects only to the server you configure.

What the app stores on your device

• Server list: the name and address of each server you add.
• Device key pair: an ECDSA key pair created in the Android Keystore for each server. The private key cannot be exported and never leaves your device. Only the public key is sent to your server when you pair.
• Shortcuts and settings: your keyboard shortcut layout and preferences.

This data stays on your device. The app disables Android cloud backup, so it is not copied to Google Drive. Uninstalling the app deletes it.

What the app sends over the network

The app sends terminal input, file transfers and signed requests only to the server address you entered. That traffic goes over HTTPS to a server you control. The developer operates no server that receives your data.

Permissions

• Internet and network state: to reach your server and reconnect when the network changes.
• Camera: only to scan the pairing QR code. Images are processed on the device and are not saved or sent anywhere.

The app reads or writes the clipboard only when you use its paste, copy or send-clipboard actions, or when a program in your terminal copies text using the OSC 52 escape sequence. Files are uploaded or downloaded only through the Android file picker and save dialog, when you choose to.

Your server

The muxalot-agent software runs on a server you operate. It stores the public keys, device names and last-seen times of paired devices in a state file on that server. You control that data and can remove a device with muxalot-agent revoke. Whatever you run in the terminal is handled by your server and is outside this policy.

Third parties

The app includes open source libraries (OkHttp, xterm.js, ZXing, and others) that run entirely on your device and do not send data to their authors. If you install the app from Google Play, Google's own privacy policy applies to Play Store activity.

Children

Muxalot is a developer tool and is not directed at children. It collects no personal data from anyone.

Changes

If this policy changes, the updated version will be posted on this page with a new date.

Contact

Questions or concerns: open an issue at github.com/muxalot/muxalot.