Add privacy policy
This commit is contained in:
59
privacy-policy.md
Normal file
59
privacy-policy.md
Normal file
@@ -0,0 +1,59 @@
|
||||
# Koridor Privacy Policy
|
||||
|
||||
_Last updated: 30 July 2026_
|
||||
|
||||
## Who we are
|
||||
|
||||
Koridor is an SSH-tunnel VPN client developed and distributed by **[K-Ops Oy](https://k-ops.eu)**. Questions about this policy can be sent to: **[koridor@k-ops.eu](mailto:koridor@k-ops.eu)**
|
||||
|
||||
## What data Koridor processes
|
||||
|
||||
Koridor connects to an SSH server that you configure and control yourself. Koridor does not operate, own, or route traffic through any server of its own.
|
||||
|
||||
| Data | Purpose | Where it is stored |
|
||||
|------|---------|-------------------|
|
||||
| SSH server address and port | Connect to your VPN server | On-device storage |
|
||||
| SSH private key and passphrase | Authenticate with your SSH server | OS secure credential store (Android Keystore / Windows Credential Manager) |
|
||||
| Connection state and session statistics | Display connection status | In-memory only, not persisted |
|
||||
|
||||
Your SSH credentials are never sent anywhere except the server you configure, as part of establishing the tunnel itself.
|
||||
|
||||
## What we do not collect
|
||||
|
||||
- Koridor does **not** operate any servers that receive your data.
|
||||
- Koridor does **not** collect analytics, crash reports, usage statistics, or any telemetry.
|
||||
- Koridor does **not** display advertising.
|
||||
- Koridor does **not** sell, share, or transmit your data to any third party.
|
||||
|
||||
## Your SSH server
|
||||
|
||||
Because you bring your own server, that server (which you or someone you trust operates) sees the traffic it routes for you — this is inherent to how any VPN or SSH tunnel works, and is outside Koridor's control. Review your server operator's own logging and retention practices separately.
|
||||
|
||||
## Permissions
|
||||
|
||||
Koridor requests the VPN service permission (Android `BIND_VPN_SERVICE` / platform-equivalent), used solely to establish the tunnel to your configured SSH server.
|
||||
|
||||
## Data retention and deletion
|
||||
|
||||
All data is stored locally on your device. To delete it, remove your profile within the app or uninstall Koridor. Uninstalling the app removes all locally stored configuration and credentials.
|
||||
|
||||
## Security
|
||||
|
||||
- Credentials are stored in the OS secure credential store and are not accessible to other apps.
|
||||
- The tunnel is secured using the SSH protocol.
|
||||
|
||||
## Children
|
||||
|
||||
Koridor is not directed at children under 13 and does not knowingly collect data from children.
|
||||
|
||||
## GDPR (EU residents)
|
||||
|
||||
Koridor processes data solely on your own device under your control. Because no data is transmitted to or stored by K-Ops Oy, we do not act as a data controller or data processor under the GDPR. You have full control over your data at all times.
|
||||
|
||||
## Changes to this policy
|
||||
|
||||
If we update this policy, the new version will be published at this URL with an updated "Last updated" date.
|
||||
|
||||
## Contact
|
||||
|
||||
Privacy questions: **[koridor@k-ops.eu](mailto:koridor@k-ops.eu)**
|
||||
Reference in New Issue
Block a user