From e21d14398a377f113e82e5ec82febf0960354301 Mon Sep 17 00:00:00 2001 From: "E. Kaparulin" Date: Thu, 30 Jul 2026 00:36:33 +0300 Subject: [PATCH] Add privacy policy --- privacy-policy.md | 59 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 59 insertions(+) create mode 100644 privacy-policy.md diff --git a/privacy-policy.md b/privacy-policy.md new file mode 100644 index 0000000..e03cf70 --- /dev/null +++ b/privacy-policy.md @@ -0,0 +1,59 @@ +# Koridor Privacy Policy + +_Last updated: 30 July 2026_ + +## Who we are + +Koridor is an SSH-tunnel VPN client developed and distributed by **[K-Ops Oy](https://k-ops.eu)**. Questions about this policy can be sent to: **[koridor@k-ops.eu](mailto:koridor@k-ops.eu)** + +## What data Koridor processes + +Koridor connects to an SSH server that you configure and control yourself. Koridor does not operate, own, or route traffic through any server of its own. + +| Data | Purpose | Where it is stored | +|------|---------|-------------------| +| SSH server address and port | Connect to your VPN server | On-device storage | +| SSH private key and passphrase | Authenticate with your SSH server | OS secure credential store (Android Keystore / Windows Credential Manager) | +| Connection state and session statistics | Display connection status | In-memory only, not persisted | + +Your SSH credentials are never sent anywhere except the server you configure, as part of establishing the tunnel itself. + +## What we do not collect + +- Koridor does **not** operate any servers that receive your data. +- Koridor does **not** collect analytics, crash reports, usage statistics, or any telemetry. +- Koridor does **not** display advertising. +- Koridor does **not** sell, share, or transmit your data to any third party. + +## Your SSH server + +Because you bring your own server, that server (which you or someone you trust operates) sees the traffic it routes for you — this is inherent to how any VPN or SSH tunnel works, and is outside Koridor's control. Review your server operator's own logging and retention practices separately. + +## Permissions + +Koridor requests the VPN service permission (Android `BIND_VPN_SERVICE` / platform-equivalent), used solely to establish the tunnel to your configured SSH server. + +## Data retention and deletion + +All data is stored locally on your device. To delete it, remove your profile within the app or uninstall Koridor. Uninstalling the app removes all locally stored configuration and credentials. + +## Security + +- Credentials are stored in the OS secure credential store and are not accessible to other apps. +- The tunnel is secured using the SSH protocol. + +## Children + +Koridor is not directed at children under 13 and does not knowingly collect data from children. + +## GDPR (EU residents) + +Koridor processes data solely on your own device under your control. Because no data is transmitted to or stored by K-Ops Oy, we do not act as a data controller or data processor under the GDPR. You have full control over your data at all times. + +## Changes to this policy + +If we update this policy, the new version will be published at this URL with an updated "Last updated" date. + +## Contact + +Privacy questions: **[koridor@k-ops.eu](mailto:koridor@k-ops.eu)**