Privacy Policy

Dex for Android · Last updated October 20, 2026

Who this is from

Dex is made by Minhajur Rahman Chowdhury Mahim ("I" below). This policy covers the Dex app for Android (com.dexide), both the version on Google Play and the one on GitHub.

What stays on your device

Everything Dex keeps is stored in its private storage on your device:

• the files in Dex's home folder, the programs and packages you install, and your terminal sessions;
• your settings, the list of SSH machines and folders you open, and your SSH keys;
• SSH passwords you choose to save and your GitHub sign-in, encrypted with a key kept in Android's Keystore.

None of it is sent to me. Dex turns off Android's app backup, so it is not copied to a cloud backup either. Uninstalling Dex, or clearing its storage in Android's settings, deletes all of it.

What Dex connects to, and when

Dex only connects to something when you use a feature that needs it:

• Your own machines over SSH. When you open a machine you added, Dex connects to it and sends what you type, the files you upload and the commands that list and show your files. To keep terminals and agent chats running, it installs a small helper program, dex-server, in ~/.dex-server on that machine. These are your machines; nothing goes from them to me.
• GitHub. If you sign in to GitHub to see and create pull requests, Dex sends your token only to GitHub (github.com and api.github.com). GitHub's own privacy statement applies to what you do there.
• Package repositories. When you install or update packages with pkg or apt, they are downloaded from the Termux project's package repository and its mirrors, which are run by others and see your IP address, like any website you visit.
• Coding agents. Claude Code and Codex run on the machine you choose, as their own programs, and talk to Anthropic and OpenAI under those companies' terms and privacy policies. If you ask Dex to install one, it runs that program's official installer on the machine. Dex shows your chats with them and doesn't send them anywhere else. When you sign in to Claude Code through Dex, its sign-in token is kept on that machine, in ~/.dex-server.
• Images in Markdown. When you preview a Markdown file that shows images from the web, they are loaded from the addresses written in the file.
• Links. Links you open go to your browser or another app you choose.

Programs you run in Dex's terminal, like git, curl or npm, connect wherever you tell them to. Dex doesn't watch or record what they send.

Permissions

• Network: for SSH, GitHub, packages and the programs you run.
• Notifications and a foreground service: to keep your terminals running in the background and tell you when an agent finishes or needs you.
• Fingerprint, face or screen lock: to confirm it's you before showing private things such as SSH keys. Android does the check; Dex never sees your fingerprint or face.
• Storage: the version on Google Play reaches your device's files only through Android's file picker, or with the storage permission on Android 10 and earlier. The GitHub version can also ask for All files access, so programs in the terminal can use your device's storage.

Moving over from the old Dex

If the earlier Dex (com.dex) is installed, Dex can bring your files and settings over from it. The two apps exchange them directly on your device, and only because both are signed with the same key; nothing leaves the device.

Children

Dex is a tool for software developers and is not directed at children under 13.

Changes

If this policy changes, the new version will be posted on this page with a new date. If Dex ever starts collecting data, this page will say so first, and the app will ask you before it does.

Contact

Questions about this policy or about Dex: minhajurrahman1403@gmail.com.