Holdwire · Remote Desktop

Privacy Policy

Last updated 2 November 2026 · Holdwire by Jiji Labs · PT JIJI LABS DIGITAL

1. Who we are

Holdwire (“Holdwire”, “the app”) is an app for iPhone (iOS 27 or later) that shows the screen of your own Mac, Windows PC or Linux computer next to a terminal, over the SSH login you already have. It is made by Jiji Labs and published by PT JIJI LABS DIGITAL, a company established in Indonesia (Kabupaten Karanganyar, Jawa Tengah) (“we”, “us”). You can reach us at support@jijilabsdigital.com.

Holdwire for Android

Holdwire is also available for Android phones and tablets (Android 8.0 or later) from Google Play. This policy covers both versions. Sections 5 to 8 describe features of the iPhone app (the computer screen, Reach from anywhere and agent alerts); the Android version does not contact either relay, and if that changes this policy will be updated first. Everything else in this policy applies to the Android version too, with these differences:

• Where your data is kept: in the app’s private storage on your Android device. Private keys and saved passwords are encrypted with a key held in the Android Keystore (in StrongBox hardware where the device has it); that key cannot be exported and never leaves the device. The app opts out of Android cloud backup and device-to-device transfer, so this data is not copied to Google Drive.
• No iCloud sync: the Android version does not sync between devices.
• Payments: Google Play processes all payments for Holdwire Pro. We never receive your payment-card details or Google Account credentials. The app uses Google Play Billing purchase information on your device to unlock Pro and to restore purchases.
• Assistant: where offered on Android, the assistant uses the on-device model provided by Android (Gemini Nano), or your own model server over your SSH connection, as described in section 10. Nothing is sent to us.
• Permissions on Android: network access (to reach your servers and find computers on your local network); notifications (to show that sessions are being held and when they reconnect, which runs as a foreground service); biometrics, only if you turn on the app lock (Android checks your fingerprint or face; the app only learns whether it succeeded). Files you open or save through Android’s file picker are read or written only when you choose them.
• Deleting data: uninstalling the app, or clearing its storage in Android Settings, deletes everything it stored, including keys created in the app.

2. What we collect

Through the app, we collect nothing that identifies you. Holdwire has:

• no account and no sign-in;
• no Holdwire cloud backend: your computer list, keys, sessions, screen pictures and terminal output are never sent to us, and we have no database of users;
• no analytics, advertising, tracking or other third-party SDKs.

There are two optional relays on a server of ours. Both are off until you turn them on. Reach from anywhere (section 7) passes your already-encrypted SSH connection along and keeps nothing on disk about you; it sees internet addresses and a computer ID while a connection is open. Agent alerts (section 8) store your device’s push tokens and a hash of a secret until you turn alerts off or 30 days pass without a push. Neither is linked to your name, and neither is used for tracking.

3. Information on your iPhone

The app stores on your iPhone: your computers and servers (names, addresses, ports, usernames, groups and favourites, and for Wake-on-LAN the network-card address of a computer and which of your always-on computers sends the wake-up signal), the identity (host key) of each computer you chose to trust, your snippets and settings, a copy of each open terminal session’s recent output so the screen can be shown at once when you return, and the last picture of each computer’s screen, kept as a small thumbnail in the app’s protected storage so the computer list can show it. If command suggestions are on, commands you ran are kept on this iPhone only, to suggest them again; you can turn this off and clear it in Settings. Commands typed at hidden prompts, such as passwords, are not kept.

Widgets, Shortcuts and the Live Activity read a small list of computer names and session states that the app keeps in a shared app folder on your device.

iCloud sync. When you are signed in to iCloud, your computer and server list (names, addresses, ports, usernames), snippets, port forwards and settings are encrypted on your device and kept in your own private iCloud (CloudKit), so your other devices get them. Keys, passwords, saved session output, screen pictures and command history are never synced. We cannot read this data. You can turn sync off in Settings.

4. Keys and passwords

Private keys and saved passwords are stored in the iPhone Keychain, available only on this device, and are never sent to us. Keys created in the Secure Enclave cannot be exported at all. When you install a key on a computer, only the public key is sent, to that computer. A saved password can be typed for you on a computer’s sign-in screen only after you confirm on your iPhone; it travels only inside the SSH connection to that computer. For a Mac, the password you use at the Mac’s lock screen is asked once, because Apple’s Screen Sharing requires it; it stays in this iPhone’s Keychain and is sent only to that Mac, inside SSH. The Reach access token for a computer is also kept in the Keychain on this device only (section 7).

5. Your computers: the session keeper and the screen helpers

Holdwire connects directly from your iPhone to the computers you add, using SSH, which encrypts the connection. With your tap, Holdwire copies small programs of our own into the .holdwire folder in your home folder on that computer (on Windows, %USERPROFILE%\.holdwire). They are compiled from our own code, they are never run on your iPhone, and they run as your own user: no administrator or root rights, and no open network port.

• The session keeper, holdwired (Linux, macOS and Windows), keeps your shell and its most recent output (up to 1 MB per session) in memory on that computer, so a session survives your iPhone locking or the app closing. It sends nothing anywhere except back to your iPhone over your SSH connection, unless you turn on agent alerts (a short sealed message to the alert relay, section 8) or Reach from anywhere (an outgoing connection to the relay, section 7). If you choose to connect a coding agent, Holdwire adds a small hook line to that agent’s own settings file on the computer, only after showing you the exact text and saving a backup next to it, so the agent can tell Holdwire when it finishes or needs permission; “Remove Holdwire from this server” takes those lines out again. A session ends when its shell exits, when you end it, or after 30 days without a connection.
• The screen helper, holdwire-screen (Linux and Windows; macOS uses the Screen Sharing built into macOS instead), shows that computer’s screen to Holdwire, and only to you: it starts when the app opens the screen through your SSH login, answers only your own user, listens on no network port, and ends after the last viewer leaves (a private desktop on a computer with no screen stops after 10 idle minutes). On Windows it also registers a per-user entry in Windows Task Scheduler, without administrator rights, so it can run inside your signed-in desktop; Reach uses a second such entry. Its logs contain status only: never keys, clipboard text or pictures.

On a Mac, the optional Holdwire Mac Screen Agent adds two features you switch on yourself while you view its screen: sound (the Mac’s audio is sent to your iPhone inside the same SSH connection and played only while the screen is open and Holdwire is in front; it is never stored or sent anywhere else) and a black screen on the Mac itself (“curtain”), so people near the Mac cannot see what you do; it ends when you switch it off, close the screen or close the app. You can switch the session keeper off per computer (“Keep sessions alive”). To remove everything, use “Remove Holdwire from this server” in the app: it ends the sessions, takes out the agent lines it added, turns Reach off, deletes the .holdwire folder and removes the scheduled tasks and launch entries. You can also delete the folder by hand; the page What runs on your server lists every file.

6. Seeing and controlling your computer

When you open a computer’s screen, its pictures go from that computer to your iPhone inside the SSH connection, and your touches and keystrokes go back the same way. Holdwire does not record the screen, and no picture, keystroke or clipboard text is sent to us. The person at the computer is told the screen is being viewed: macOS shows its own screen-recording indicator, Wayland desktops show a share dialog and a sharing indicator, and on Windows and Linux X11 the helper shows a bar at the top of the screen for as long as it is viewed. On a computer with no desktop, Holdwire can start a private desktop that only exists while you look at it.

• Clipboard: while a screen is open, text you copy on the computer can appear on your iPhone clipboard (other apps on your iPhone can read the iPhone clipboard), and text on your iPhone clipboard is sent to the computer when you paste. It travels inside SSH and is not kept.
• Sending files: files you choose from Files or Photos are sent over SFTP into the Downloads folder of the computer whose screen is open. They go straight to that computer, not through us.
• Wake-on-LAN: to wake a sleeping computer, Holdwire asks another of your computers on the same network, over SSH, to send the wake-up signal. Nothing is sent to us.
• External monitor: if you connect a monitor or TV, the screen is shown on it from your iPhone. Nothing is sent anywhere else.

7. Reach from anywhere and the Holdwire relay (optional)

Reach from anywhere (part of Holdwire Pro) lets your iPhone reach a computer when you are away from home, without a VPN and without opening a port on your router. It is off by default and you turn it on per computer, while you can still reach that computer. When it is on, holdwired on your computer keeps one outgoing TLS connection to our relay. When you open the computer from outside your network, your iPhone connects to the relay as well, and the relay joins the two connections and passes bytes between them. At the computer the relay can only reach the computer’s own SSH server on the same machine (127.0.0.1), nothing else on your network.

What passes through the relay: the bytes of your SSH connection, which are encrypted end to end between your iPhone and your computer. Your iPhone checks the computer’s host key itself, so the relay cannot read or change the connection, and the screen, terminal, clipboard and files inside it stay unreadable to us.

What the relay sees while a connection is open:

• Internet addresses (IP addresses) of your iPhone and of your computer, as any server sees them.
• A computer ID (a code derived from a random secret made on your computer, not your name or computer name) and the access token your iPhone presents, which the relay checks against a hash.
• Times and amounts of data as simple totals.

What the relay keeps: nothing on disk about you. The IDs, hashes and addresses above are held in the relay’s memory only while needed, to pair the two connections and to limit abuse (a cap on connections per address, and a temporary refusal after repeated failed attempts); they are gone when the connection closes or the relay restarts. There is no database. The relay’s log is one line per hour of totals (how many computers and connections, how many failures); it never contains addresses, IDs or tokens. The only file the relay stores is its own TLS certificate and key. Our hosting provider can see network-level connection metadata, as with any server on the internet.

To stop using Reach, turn the switch off for that computer in the app, or use “Remove Holdwire from this server”. If you only delete the app, the computer keeps its outgoing link to the relay until you turn Reach off or remove Holdwire from it; the link is useless without your access token and the computer’s own SSH login. Without an active Holdwire Pro plan, Reach stays set up on the computer, but the app connects directly only.

8. Agent alerts and the alert relay (optional)

Agent alerts tell you on the Lock Screen when a coding agent or a command on your computer has finished or needs you, and let you approve or deny an agent’s permission prompt after Face ID or your passcode. They are off by default. The switch “Agent alerts on the lock screen” explains this before it turns on. Without alerts, the Live Activity still stays on the Lock Screen and its “held for” timer keeps ticking, and news appears when you open the app. iOS ends a Live Activity after 8 hours (it can stay up to 4 more hours on the Lock Screen); if alerts are on, the app starts a fresh one through the relay.

When you turn alerts on, iOS gives the app push tokens, and the app registers them at our alert relay. The app also makes a random key that stays in this device’s Keychain and is given, over your SSH connection, to your computer only. When something happens, holdwired on your computer seals a short message with that key (for an agent’s permission prompt this includes the agent’s name and a short description of what it wants to do) and sends it to the relay, which passes it on to Apple Push Notification service. The relay cannot read the message; your iPhone opens it with the key.

What the alert relay sees and keeps:

• Push tokens: seen. Kept until you turn alerts off, or until 30 days pass without a push.
• Route secret (proves that a message comes from your computer): seen. Only its hash is kept.
• The sealed message: seen as encrypted data only. Passed on, never logged, never readable by us.
• Your computer’s address, host name, commands, output, screen and keys: never seen, never kept.
• The IP address your computer connects from: seen, as with any connection. Not logged.

The alert relay has no account, no email, no analytics and no third-party SDKs. Its logs hold only counts and error codes, and are kept for 7 days. Turning alerts off removes your registration from the relay and deletes the alert settings from every computer that has them. If the relay is unavailable, your sessions keep working; only alerts are late.

9. Permissions

• Local Network: to reach and find your computers on your home or office network, and to open their screens.
• Face ID: to lock the app if you turn that on, to type a saved password on a computer, and to answer an agent’s permission prompt from the Lock Screen. iOS checks your face; the app only learns whether it succeeded.
• Files and Photos: only for files you choose to send to a computer.
• Notifications: for banners when a session you are not looking at rings the terminal bell or sends a program notification (these banners stay on your iPhone), and for agent alerts if you turn them on. iOS asks first, and you can say no.

10. The assistant: on-device or your own model

The assistant (Holdwire Pro) uses Apple’s on-device language model on devices that support it. The question you ask and recent terminal text are processed on your iPhone and are not sent to us or to any server. The assistant can type a suggested command for you to review; it never presses Return or runs anything itself.

Optionally, you can choose your own language-model server instead, such as Ollama or LM Studio running on your Mac or on a server of yours. Holdwire then sends the request only through your SSH connection to that machine. It goes to no cloud service of ours; what that machine’s model server does with it is up to you, and if it uses a cloud model, that service receives the request.

11. Subscription and payments

Holdwire is free to download. The free version includes the terminal on all your computers and servers, the screen of one computer, files, forwarding a port of your own computer while the app is open, and agent approvals. Optional Holdwire Pro adds the screens of all your computers, Reach from anywhere, the external monitor, sessions kept running on every computer and the assistant, as an auto-renewing subscription or a one-time purchase. Apple processes all payments: we never receive your payment-card details or Apple Account credentials. The app uses StoreKit purchase information on your device to unlock Pro and to restore purchases. See the Terms of Use.

12. No ads, no tracking, no sharing

Holdwire contains no advertising or analytics and does not track you across apps or websites. We do not sell or share your data, because we do not collect it.

13. Keeping and deleting data

Your data stays on your devices and, with iCloud sync, in your own iCloud, until you remove it. Deleting the app deletes it, including keys created in the app and the Reach access tokens; keep another way into your computers before you do. The programs Holdwire placed on your computers can be removed as described in section 5, and Reach as described in section 7. Alert registrations at the relay are removed when you turn agent alerts off, as described in section 8. We cannot delete your data for you, because we do not hold a copy; the only data of yours our servers hold is described in sections 7 and 8.

14. If you email us

If you contact support, we receive the contact details and information you choose to send. Never send private keys, passwords or computer addresses you want to keep private. We use correspondence only to respond to you, and you may ask us to delete it.

15. Children

Holdwire is a tool for people who manage computers and servers and is not directed at children.

16. Changes

This policy may be updated as the app changes. The date above identifies this version.

17. Contact us

PT JIJI LABS DIGITAL
Jalan Piere Tendean, Pokoh RT 02/RW 07, Ngijo, Tasikmadu, Kabupaten Karanganyar, Jawa Tengah 57721, Indonesia
Email: support@jijilabsdigital.com