Privacy
KoreShell is built on a strict data-minimization principle: your servers, commands, and credentials never leave your machine.
What Stays Local (Always)
| Data | Where it lives |
|---|---|
| Server credentials (passwords, SSH keys) | Local vault only |
| Terminal command history | Local SQLite database |
| SFTP file transfers | Direct SSH — your machine ↔ your server |
| AI conversation history | Local SQLite database |
| Server metadata (host, port, username) | Local SQLite database |
| Script contents and secret variables | Local vault |
| Backup job configs | Local SQLite database |
| Monitoring data | Not persisted — streamed and discarded |
What the License Server Receives
When activating or validating a license, KoreShell sends three values to license.koreshell.io over TLS 1.3:
- Your license key
- A device fingerprint — SHA-256 hash of hardware identifiers (CPU serial, board serial, MAC address). The hash is one-way — hardware details cannot be reconstructed from it.
- The app version
Nothing else. No command history, no server addresses, no file contents.
License validation results are cached locally — the app works offline after the first activation.
AI Providers
When you use the AI tab, prompts and any context you include are sent to your configured AI provider (Anthropic, OpenAI, etc.) over HTTPS.
- KoreShell never receives AI conversation data — it goes directly from your machine to the provider
- Server credentials and vault contents are never included in prompts
- If you use Ollama, all AI inference runs locally — no data leaves your device
Review the privacy policy of your chosen AI provider for how they handle API requests.
Crash Reports
Crash reports are not sent automatically. If the app crashes, you may be shown a prompt to share a report. The report contains:
- App version
- OS version and architecture
- Crash stack trace
- No credentials, commands, or server data
Crash reports are opt-in and can be submitted or dismissed.
Analytics
KoreShell collects no analytics, usage tracking, or telemetry beyond license validation.
Data Deletion
To completely remove all KoreShell data from your machine:
- Settings → License → Deactivate — removes this device from your license
- Uninstall the app
- Delete the data directory:
# macOS
rm -rf ~/Library/Application\ Support/io.koreshell.desktop/
# Linux
rm -rf ~/.local/share/io.koreshell.desktop/
# Windows (PowerShell)
Remove-Item -Recurse -Force "$env:APPDATA\io.koreshell.desktop\"
This permanently deletes all servers, credentials, keys, scripts, and conversation history.