EnvDockPrivacy Policy
Effective date: October 30, 2026 · Last updated: October 30, 2026
This Privacy Policy explains how the EnvDock mobile application (package com.envdock.app) and this website (together, the "App"), provided by Growtech ("we", "us", "our"), handle information. In short: EnvDock is local-first. Your hosts, credentials and environment files stay on your device. We do not run an EnvDock account system or cloud, and we do not sell your data.
1. Who we are
EnvDock is developed and published by Growtech. For any privacy question, contact support@envdock.com.
2. What the App does
EnvDock is an SSH tool for managing environment files, ports, firewall rules, runbooks, a terminal and load tests on servers that you configure and control. It connects directly from your device to those servers.
3. Data stored on your device
The following information you enter or generate is stored only on your device. It is not uploaded to Growtech or any EnvDock server:
- Host details: names, hostnames or IP addresses, ports, usernames;
- Credentials: SSH passwords, private keys and passphrases;
- Projects, deploy paths, environments and
.envkeys and values, presets and runbook commands; - Apply history and load-test configuration and results;
- App settings, App-lock preference and subscription status cache.
This data is kept in an encrypted local database (AES-256, Hive). The database key is generated on your device and held in Android's secure storage (backed by the Android Keystore). If you include personal data, such as names or emails, inside your own environment files or server fields, it is stored the same way and is only sent to the servers you choose.
Encrypted vault backup (optional, Pro). You may export an encrypted backup file to a location you choose (for example your device storage or a cloud drive you pick in the system file picker), and import it later. The backup is encrypted on-device with AES-GCM using a key derived from your passphrase (PBKDF2). Your passphrase never leaves the device and we cannot recover it. Where you store the backup file is your choice and is subject to that storage provider's policies.
4. Data sent over the network
EnvDock only makes network connections for the following purposes:
| Destination | What is sent | Why |
|---|---|---|
| SSH servers you configure | Your SSH credentials for authentication, and the commands, file reads and writes, and terminal input you start | Core functionality. Encrypted in transit by SSH. Load tests run on that server and target only its loopback address (127.0.0.1). |
| Google Play Billing | Purchase requests and purchase tokens, handled by Google under your Google account | Processing subscriptions |
| RevenueCat | An anonymous app user ID generated by the RevenueCat SDK, purchase receipts/tokens, product and entitlement info, and basic device and app information (such as OS version, app version, locale/country) | Verifying and restoring your Pro subscription |
We do not receive the contents of your servers, your credentials or your environment values.
5. Purchases and RevenueCat
Payments are processed by Google Play. We never see your payment card details. Subscription status is managed by RevenueCat, Inc. as our service provider. We use RevenueCat data only to determine whether Pro is active and to provide customer support for purchases. We can see purchase history associated with the anonymous RevenueCat user ID in RevenueCat's dashboard, but it is not linked to your name or email by the App. Google's handling of your data is described in the Google Privacy Policy.
6. Biometric app lock
The App lock is optional. When enabled, EnvDock asks Android to verify your fingerprint, face or device credential. Biometric data is handled entirely by your device's operating system. EnvDock only receives a success or failure result and never accesses, stores or transmits biometric data.
7. What we don't do
- No EnvDock account or sign-in is required;
- No analytics, advertising or tracking SDKs are included in the App;
- No ads;
- We do not sell, rent or share your personal data for advertising;
- We do not access your contacts, location, camera, microphone or photos;
- We do not send load-test traffic to third-party websites.
If you have opted in to share usage and diagnostics with Google on your device, Google Play may provide us with aggregated crash and performance statistics (Android vitals). This is controlled by your device settings, not by the App.
8. Permissions
- Internet — to connect to your SSH servers and to Google Play / RevenueCat.
- Biometric / fingerprint — only for the optional App lock.
- File access via the system picker — only when you choose to import an SSH key, or export/import an encrypted backup. The App accesses only the files you select.
9. Security
We use encryption at rest (encrypted local database with a Keystore-backed key) and in transit (SSH to your servers, HTTPS to billing services). No method is perfectly secure. Protect your device with a screen lock, enable the App lock, and use least-privilege SSH keys.
10. Retention and deletion
- Local data stays on your device until you delete it in the App or uninstall the App. Uninstalling removes the local database and its key. We cannot recover it.
- Exported backup files remain wherever you saved them until you delete them.
- Purchase records are retained by Google and RevenueCat as required for billing, tax and fraud prevention. To request deletion of RevenueCat data linked to your purchases, contact us.
- To stop subscription billing, cancel in Google Play → Payments & subscriptions. Uninstalling does not cancel a subscription.
11. Your choices and rights
Because almost all data is stored only on your device, you control it directly: you can view, edit, export or delete it in the App at any time. Depending on where you live (for example under the GDPR or similar laws), you may have rights to access, correct, delete or object to processing of personal data we or our service providers hold. To exercise these rights, email support@envdock.com. We may need your purchase order ID to locate subscription records.
12. Children
EnvDock is a professional developer tool and is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children.
13. This website
This website is a static site. It uses no cookies, analytics or third-party trackers and loads no external fonts or scripts. The web host may keep standard server logs (such as IP address and browser type) for security and operation.
14. Changes to this policy
We will update this policy if the App's data practices change, for example if we add analytics, crash reporting or accounts. We will post the new version here with a new "Last updated" date and, for material changes, notify you in the App or on this website.
15. Contact
Growtech — EnvDock
Email: support@envdock.com