Privacy Policy

Last updated: 1 November 2026

Phogit is a git client for iPhone and iPad, published by Caffeinated Math, an umbrella of HJJB, LLC. It doesn’t collect your data. There are no accounts with us, no analytics, no advertising, and no tracking. We don’t run servers that your data passes through.

What stays on your device

  • Repositories. Repositories you clone or create are stored in Phogit’s Documents folder on your device. They appear in the Files app under On My iPhone (or On My iPad) › Phogit, and they’re included in your device backups (iCloud Backup or a computer backup) if you have backups turned on, just like other app data.
  • Credentials. Personal access tokens and sign-in tokens for git hosts are stored in the iOS Keychain, marked “this device only”. They aren’t synced to iCloud Keychain, aren’t included in backups that can be restored to another device, and are never sent to us.
  • SSH keys. Keys you create in Phogit stay on the device. An Ed25519 key is stored in the iOS Keychain, marked “this device only”, like tokens. A Secure Enclave key is created inside your device’s Secure Enclave and can’t be read or copied out of it, even by Phogit. Private keys never leave the device; the public key goes only to the servers you sign in to and wherever you copy or share it.
  • Trusted servers. The keys of SSH servers you’ve trusted (known hosts), and which of your SSH keys last worked for each server, are stored in Phogit’s app storage on the device, so Phogit can check each server and offer the right key first. They’re included in device backups like other app data. You can see and remove trusted servers in Settings › Known Hosts.
  • Settings. Your preferences (editor and browser options, for example) are stored on the device with the system’s standard settings storage.
  • Shared links. When you share a repository link to Phogit from another app, the link is kept in a container shared only between Phogit and its share extension until you open Phogit and confirm or dismiss the clone.
  • Diagnostics. iOS gives Phogit reports about crashes, hangs and performance through Apple’s MetricKit framework. Phogit saves them on your device, where you can see them in Settings › About Phogit › Diagnostics, and keeps the 20 most recent. They never leave the device unless you share one, and you choose where to send it. Delete All on that screen removes them.

Network connections

Phogit connects only to the services you choose:

  • Git hosts. When you clone, fetch, pull or push, Phogit connects directly from your device to the host in the repository’s URL (for example github.com, gitlab.com or your own server) over HTTPS or SSH. What’s sent is what git sends: the repository data involved, and your credentials for that host if the repository needs them. Over SSH, that’s your public key and a signature made with your private key, never the private key itself.
  • Signing in to GitHub. If you choose to sign in with GitHub, Phogit talks to GitHub’s sign-in service to get a token, which is then stored in the Keychain as described above.

Your use of those hosts is covered by their own privacy policies. Phogit doesn’t include third-party analytics, crash-reporting or advertising SDKs, and it doesn’t send your code to any other service. It never uploads diagnostic reports; a report goes somewhere only when you share it yourself. If you’ve turned on Share With App Developers in iOS Settings › Privacy & Security › Analytics & Improvements, Apple may share crash reports with us; that’s controlled by iOS, not Phogit.

Children

Phogit isn’t directed at children and doesn’t knowingly collect information from anyone, including children.

Deleting your data

Deleting a repository in Phogit removes it from your device. Deleting the Phogit app removes its repositories, settings, trusted servers and diagnostic reports. iOS can keep Keychain items after an app is deleted, so when you no longer need a token, revoke it in that host’s account settings; a revoked token stops working everywhere. Likewise, remove SSH public keys you no longer use from your hosts.

Changes

If this policy changes, the new version will be posted at this address with a new “Last updated” date. If a future version of Phogit adds a feature that sends data anywhere other than the git hosts you choose, the app will ask for your permission before using it, and this policy will be updated first.

Contact

Questions about this policy: support@caffeinatedmath.com

Published by Caffeinated Math, an umbrella of HJJB, LLC.