Last update: 6 October 2026
Maho Cloud is an iOS and Android app for the hosting dashboard of your Maho websites. This policy tells which data the app uses, where the data goes, and who can see it.
The app sends your data only to the dashboard that you sign in to. The app has no analytics, no advertising, and no tracking.
You sign in with the email address and the password of your dashboard account. The app sends them to the Maho Cloud dashboard, which finds the dashboard of your account: the Maho Cloud dashboard, or the dashboard of a hosting provider that uses it under its own brand. The app gets your websites, deployments, server charts, and activity from the API of that dashboard, and it sends your deploy and reboot requests to it.
The operator of the dashboard is responsible for this data. For the Maho Cloud dashboard, the operator is us. For the dashboard of a hosting provider, the operator is that provider.
When you sign in, the app sends your email address, your password, the two-factor code if your account uses one, and the name of your device to the dashboard. The dashboard gives back a token. The app does not keep your password. The dashboard shows the device name in your profile and in your activity log, so that you can sign out the device there.
This data stays on your device. The app does not include it in device backups. When you sign out in the app, the app deletes the token on the dashboard, and it deletes the account and its token from the device.
The app shows the icon of a dashboard. It loads the icon from the address that the dashboard gives, which the operator of the dashboard chooses.
The app sells nothing. The billing of your websites stays in the dashboard.
When this policy changes, we update this page and the date at the top.
For questions about this policy, send an email to [email protected].