Privacy Policy for Rex Remote
Effective Date: 2026-10-27 (ads, usage statistics and crash reports added)
Rex Remote shows live statistics, history, widgets and alerts for Linux, macOS and Windows servers that you add yourself. It connects directly from your device to those servers over SSH. There is no Rex Remote account and no Rex Remote server, and nothing passes between your device and your servers through anyone else.
1. Information We Collect
Your servers, their names, addresses, user names, keys and readings stay on your device and go only to the servers themselves (sections 2 and 3). They are never sent to us, to Google or to anyone else.
The app is free and shows ads from Google AdMob (section 4), and uses Google Firebase for anonymous usage statistics and crash reports (section 5). Those services receive the device and usage information described there.
2. Information Stored on Your Device
To work, the app keeps the following on your device only:
The app’s SSH key. On first use the app generates its own ed25519 key pair. The private key is stored in the operating system’s secure storage (iOS Keychain, Android Keystore-backed storage) and never leaves the device.
Your server list. The names, addresses, ports, user names and pinned host keys of the servers you add, and your alert and display settings.
Recent readings. The latest statistics for each server, which the home screen widgets and alerts read.
If you choose the one-time login when adding a server, the password or private key you enter is used for that single connection to install the app’s restricted key on the server, and is not stored.
Removing a server in the app deletes its entry and readings from the device. Uninstalling the app deletes the rest; on iOS the system may keep the app’s key in the Keychain after an uninstall, and the app reuses it if you install it again.
3. Connections the App Makes
The app connects only to the servers you add, using SSH, from your device. On those servers it can only start the Rex Boing agent: the key it authorises is restricted so that it cannot open a shell or forward connections. The setup command the app shows you downloads the agent from the project’s public GitHub releases page; that download is made by your server, not by the app.
In demo mode the app replays bundled sample recordings and connects to no servers.
4. Advertising (Google AdMob)
The app shows a banner ad at the bottom of the server list and of each server’s dashboard. To serve and measure ads and to prevent fraud, Google may collect advertising identifiers (Android advertising ID, iOS IDFA), device and app information, approximate location derived from your IP address, and your interactions with the ads.
In the European Economic Area, the United Kingdom and Switzerland, Google’s consent form asks before ads are personalised. You can change your choice at any time under Settings › About › Ad privacy choices.
On iOS, the IDFA is used only if you allow tracking when the app asks; if you don’t, ads are not personalised and every feature works the same.
Server names, addresses and readings are never used for or shared with advertising.
Google’s privacy policy: policies.google.com/privacy; how Google uses information from apps that use its services: policies.google.com/technologies/partner-sites.
5. Usage Statistics and Crash Reports (Google Firebase)
To improve the app and fix errors, it uses Google Analytics for Firebase and Firebase Crashlytics. They receive:
Usage events: which screens are opened and which features are used, for example that a server was added with a pairing code or a one-time login, that demo mode or alerts were switched on, and how many servers the app has.
Crash and error reports: the stack trace and the state of the app when something fails. Errors from network connections and stored data are reduced to their type, because their messages can contain addresses.
Device information: an app-instance identifier, device model, operating system and app version, and country or region derived from your IP address.
They never include server names, addresses, ports, user names, passwords, keys or readings. Firebase Analytics does not read the advertising identifier and sends no signals for ad personalisation. Usage statistics are kept for up to 14 months and crash reports for 90 days. Firebase’s privacy information: firebase.google.com/support/privacy.
6. Sharing Your Information
We do not sell any information. Apart from Google’s ad and Firebase services described above, which process it on our behalf or under their own policies, nothing is shared with third parties. When you use the share button, the text you share goes only where you choose to send it.
7. Notifications and Background Refresh
If you allow notifications, alerts about your servers are created on your device from readings the app fetched itself. Background refresh, when allowed by your operating system, makes the same direct SSH connections to your servers to keep widgets and alerts current.
8. Children’s Privacy
Rex Remote is a tool for server administrators and is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children.
9. Data Security
Connections to your servers are encrypted with SSH, and each server’s host key is pinned so that a changed key stops the connection. The app’s private key is kept in the operating system’s secure storage.
10. Your Rights
We hold no account or profile about you. You can remove what the app stores by removing your servers in the app or uninstalling it. You can reset or limit the advertising identifier in your device’s privacy settings, change your ad consent in the app, and ask us at the address below to delete the Firebase data linked to your app installation. To take the app’s access away from a server, use the app’s option to uninstall the agent from that server, or delete the app’s line from the server’s authorized_keys file.
11. Changes to This Policy
If this policy changes, the new version will be published at this address with a new effective date.
12. Contact Us
Rexyrex Email: rexyrex.dev@gmail.com