# Koridor Privacy Policy

_Last updated: 30 July 2026_

## Who we are

Koridor is an SSH-tunnel VPN client developed and distributed by **[K-Ops Oy](https://k-ops.eu)**. Questions about this policy can be sent to: **[koridor@k-ops.eu](mailto:koridor@k-ops.eu)**

## What data Koridor processes

Koridor connects to an SSH server that you configure and control yourself. Koridor does not operate, own, or route traffic through any server of its own.

| Data | Purpose | Where it is stored |
|------|---------|-------------------|
| SSH server address and port | Connect to your VPN server | On-device storage |
| SSH private key and passphrase | Authenticate with your SSH server | OS secure credential store (Android Keystore / Windows Credential Manager) |
| Connection state and session statistics | Display connection status | In-memory only, not persisted |

Your SSH credentials are never sent anywhere except the server you configure, as part of establishing the tunnel itself.

## What we do not collect

- Koridor does **not** operate any servers that receive your data.
- Koridor does **not** collect analytics, crash reports, usage statistics, or any telemetry.
- Koridor does **not** display advertising.
- Koridor does **not** sell, share, or transmit your data to any third party.

## Your SSH server

Because you bring your own server, that server (which you or someone you trust operates) sees the traffic it routes for you — this is inherent to how any VPN or SSH tunnel works, and is outside Koridor's control. Review your server operator's own logging and retention practices separately.

## Permissions

Koridor requests the VPN service permission (Android `BIND_VPN_SERVICE` / platform-equivalent), used solely to establish the tunnel to your configured SSH server.

## Data retention and deletion

All data is stored locally on your device. To delete it, remove your profile within the app or uninstall Koridor. Uninstalling the app removes all locally stored configuration and credentials.

## Security

- Credentials are stored in the OS secure credential store and are not accessible to other apps.
- The tunnel is secured using the SSH protocol.

## Children

Koridor is not directed at children under 13 and does not knowingly collect data from children.

## GDPR (EU residents)

Koridor processes data solely on your own device under your control. Because no data is transmitted to or stored by K-Ops Oy, we do not act as a data controller or data processor under the GDPR. You have full control over your data at all times.

## Changes to this policy

If we update this policy, the new version will be published at this URL with an updated "Last updated" date.

## Contact

Privacy questions: **[koridor@k-ops.eu](mailto:koridor@k-ops.eu)**