ProxMan Privacy Policy

Last Updated: April 17, 2026

Introduction

Welcome to ProxMan ("we", "our", or "us"). We are committed to protecting your privacy and securing your sensitive data. This privacy policy explains how we handle your personal data when you use our application.

ProxMan is designed with a privacy-first architecture. Unlike many cloud-based management applications, ProxMan operates as a direct client to your Proxmox infrastructure. Your credentials and confidential information never leave your device except when transmitted directly to your own Proxmox servers.

Data We Collect

Information You Provide to Us

ProxMan adheres to strict data minimization principles. We collect only the absolute minimum information necessary to provide our service:

Proxmox Server Credentials: When you add a Proxmox server to ProxMan, you provide server connection details including hostname, port, username, password, and API tokens. These credentials are stored exclusively on your device using iOS Keychain encryption or Android Keystore encryption, depending on your platform.

Server Configuration Data: Information about your Proxmox server configurations, virtual machines, containers, storage pools, and other infrastructure details. This data is stored locally on your device and optionally in your personal iCloud account (if you enable iCloud synchronization on iOS). On Android, all data is stored exclusively on your device with no cloud synchronization or backup.

Device Identifiers: For optional push notification functionality, we collect device-specific push notification tokens. These tokens are technical identifiers provided by Apple that allow our notification relay service to route notifications to your specific device. Push notifications are not available on Android.

Information Collected Automatically

App Usage Analytics: We may collect basic, anonymized, and aggregated analytics about feature usage patterns within the app. This data is completely anonymized and cannot be linked back to you, your servers, or your infrastructure. This helps us understand which features are most valuable and guide future development priorities.

Performance and Diagnostic Data: Anonymous crash reports and performance metrics to help us identify technical issues, bugs, and performance bottlenecks. These reports do not contain your credentials, server addresses, or any confidential information about your infrastructure.

How We Use Your Data

We use the information we collect strictly for the following legitimate purposes:

Providing Core Services: Your Proxmox server credentials and configuration data are used exclusively on your device to establish direct, encrypted connections to your Proxmox servers, retrieve information, and execute management commands as you request.

Authentication: Your Proxmox server credentials are used solely for authenticating your device to your own Proxmox servers.

Push Notifications (Optional): If you enable push notifications, we use device tokens to operate a notification relay service. This service receives minimal, non-confidential notification data from your Proxmox servers (such as task completion status, resource alerts, or system events) and forwards these notifications to your device. This feature is currently available on iOS only.

Improving Our App: We analyze anonymized usage patterns and performance data to enhance the app's functionality, prioritize feature development, fix bugs, and optimize performance. This analysis is performed on aggregated, anonymized data that cannot be traced back to individual users or their infrastructure.

Technical Support: When you contact us for support, we may use information you voluntarily provide to diagnose issues and provide assistance. We will never ask for your Proxmox passwords or API tokens.

Data Storage and Security

Local Storage on Your Device

Server Credentials: Your Proxmox server credentials are stored with encryption on your device using iOS Keychain Services or Android Keystore, depending on your platform. You can optionally enable biometric authentication (Face ID / Touch ID on iOS, or fingerprint / biometric on Android) for additional protection.

Configuration and Infrastructure Data: All settings, server configurations, virtual machine details, container information, storage pool data, and other infrastructure information are stored exclusively on your device. This data is encrypted and protected by platform security mechanisms (iOS Keychain or Android Keystore). On both platforms (iOS and Android), data is never transmitted to any external server or cloud service.

Optional iCloud Synchronization: If you enable iCloud synchronization, your server configurations and credentials are synchronized to your personal iCloud account using Apple's end-to-end encrypted iCloud Keychain. This feature is available on iOS only.

Direct Server Communication

Direct Connection: ProxMan establishes direct connections from your device to your Proxmox servers. We do not operate proxy servers or route your traffic through intermediary servers.

End-to-End Encryption: All communication between ProxMan and your Proxmox servers is encrypted using industry-standard HTTPS/TLS protocols (when properly configured on your servers). This ensures that your data is protected in transit from eavesdropping or tampering.

Push Notifications Relay Service (Optional Feature)

Push notifications are currently available on iOS only. If you are using ProxMan on Android, this section does not apply to you.

If you explicitly opt in to enable push notifications, ProxMan operates a notification relay service with the following characteristics:

Purpose: The relay service exists solely to forward notification messages from your Proxmox servers to your device when the app is not actively running.

Device Tokens: Your device's push notification token (a technical identifier provided by Apple) is registered with our relay service. This token allows the relay to route notifications to your specific device.

Data Transmitted to Relay: The relay service receives only minimal, non-confidential notification data such as task completion status, resource usage alerts, backup completion notifications, and system event summaries.

Data Retention: Notification messages are retained only for the minimum time necessary to ensure delivery (typically seconds to minutes). Once delivered, notification data is immediately deleted from our relay servers.

Security: The relay service uses encrypted connections and is designed with security best practices to protect the limited data it handles.

Opt-Out: Push notifications are entirely optional. You can disable them at any time, and doing so will immediately deregister your device from the relay service.

We do not sell, rent, trade, or otherwise transfer your personal information to any outside parties.

The limited data we may share is restricted to the following specific circumstances:

Apple Services: We use Apple's infrastructure services including the App Store (for distribution), Apple Push Notification Service (for delivering notifications), and optionally iCloud (for synchronization). These services are governed by Apple's privacy policies.

Google Services: We use Google Play Store for distribution on Android. No Google cloud services are used for data storage or synchronization. Google Play Services policies apply to the distribution of the app.

Push Notification Relay Service: If you enable push notifications, our relay service receives minimal, non-confidential notification data as described above.

Payment Processing: In-app purchases and subscriptions are processed through Apple's App Store (on iOS) or Google Play Store (on Android) and RevenueCat for subscription management. These services receive only payment-related information necessary to process transactions.

Legal Requirements: We may disclose information if required by law, court order, subpoena, or governmental regulation.

Safety and Legal Rights: We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Your Privacy Rights

We respect your privacy rights and provide you with control over your data. Depending on your location, you may have the following rights regarding your personal data:

Right to Access: You have the right to request copies of the personal data we hold about you. Given our privacy-first architecture, the data we hold is extremely limited and mostly anonymized.

Right to Deletion: You have the right to request deletion of your personal data. You can delete your locally stored data at any time by removing servers from the app or uninstalling the app. To delete data from our notification relay service, simply disable push notifications in the app settings.

Right to Withdraw Consent: Where we rely on your consent to process data (such as push notifications), you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request within the timeframes required by applicable law.

Children's Privacy

ProxMan is a professional infrastructure management application not intended for use by children. We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy.

We encourage you to review this privacy policy periodically to stay informed about how we protect your data. Your continued use of ProxMan after changes are posted constitutes your acceptance of the updated policy.

Data Retention

We retain data only for as long as necessary to fulfill the purposes for which it was collected, and we apply different retention periods based on the type of data:

Server Credentials and Configuration Data: Stored on your device until you explicitly remove a server from the app or uninstall the app. If you enable iCloud synchronization (iOS only), this data is retained in your personal iCloud account according to Apple's policies until you disable synchronization or delete the data. On Android, all data is stored exclusively on the device and is deleted when you remove a server or uninstall the app.

Push Notification Device Tokens: Stored on our relay service only while push notifications are enabled. When you disable push notifications or remove a server, the associated device tokens are immediately deleted from our relay service. Push notification tokens are not collected on Android.

Notification Message Data: Retained on our relay service only for the minimum time necessary to ensure delivery (typically seconds to minutes). Once delivered to your device, notification data is immediately and permanently deleted from our servers.

Anonymized Analytics Data: Aggregated and anonymized analytics may be retained indefinitely for statistical analysis and product improvement purposes. This data cannot be linked back to you or your infrastructure.

Support Communications: If you contact us for support, we may retain your communications for a reasonable period to provide ongoing assistance and improve our support processes. We will never retain any credentials you may have inadvertently shared and will request that you change such credentials immediately.

Third-Party Services

ProxMan integrates with the following third-party services, each with limited and specific purposes:

RevenueCat: Used for managing subscription status and in-app purchase validation.

Apple iCloud (Optional): If you enable iCloud synchronization, your server configurations and credentials are synchronized to your personal iCloud account using Apple's end-to-end encrypted iCloud Keychain. Available on iOS only.

Apple Push Notification Service (APNS): Used to deliver push notifications to your device. Available on iOS only.

Google Play Store: Used for app distribution and in-app purchase processing on Android.

International Data Transfers

ProxMan's privacy-first architecture minimizes international data transfers:

Credentials and Confidential Data: Your Proxmox server credentials and confidential infrastructure data are never transferred outside your device except when transmitted directly to your own Proxmox servers (which you control and may be located anywhere in the world).

Push Notification Relay Service: If you enable push notifications, minimal non-confidential notification data may be processed by our relay servers. The location of these servers may vary, but we implement appropriate safeguards to protect data in transit and at rest.

iCloud Synchronization: If you enable iCloud synchronization, your data is transferred to and stored in Apple's iCloud infrastructure according to Apple's data residency policies for your region. This feature is available on iOS only.

Anonymized Analytics: Anonymized, aggregated analytics data may be processed in various locations, including the United States. This data cannot be linked back to you or your infrastructure.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with specific rights:

Legal Basis for Processing: We process your personal data based on: (1) your consent (for push notifications), (2) contractual necessity (to provide the app's core functionality), and (3) legitimate interests (for anonymized analytics and app improvement).

Data Controller: For the limited personal data we collect, ProxMan acts as the data controller.

Data Protection Officer: For privacy inquiries from European users, please contact us at the email address provided below.

Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

Security Measures

We implement comprehensive security measures to protect your data:

Device-Level Security: Your credentials are protected by iOS Keychain encryption or Android Keystore encryption, both of which use hardware-backed encryption on supported devices. On Android, all data is stored exclusively on the device with no cloud backup or synchronization.

Biometric Authentication: Optional Face ID or Touch ID (iOS) or fingerprint/biometric (Android) protection for accessing your stored credentials.

Encrypted Transmission: All communications between ProxMan and your Proxmox servers use HTTPS/TLS encryption(if properly configured).

Minimal Data Collection: By collecting only the minimum necessary data, we minimize the potential impact of any security incident.

Regular Security Reviews: We regularly review and update our security practices to address emerging threats and vulnerabilities.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Email: support@proxman.app

Response Time: We aim to respond to all privacy inquiries within 30 days.

When contacting us, please provide sufficient detail about your inquiry or request so we can assist you effectively. ProxMan Support will never ask you for your Proxmox credentials or API tokens.

---

By downloading, installing, or using ProxMan, you acknowledge that you have read, understood, and agree to be bound by this privacy policy. If you do not agree with this privacy policy, please do not use ProxMan.

Your continued use of ProxMan following the posting of changes to this privacy policy will be deemed your acceptance of those changes.