Privacy Policy — PVE Remote (ProxGlass)
PVE Remote ("the App") is an iOS client for Proxmox Virtual Environment. This policy explains what the App does and does not do with data.
1The core design: your server, your data
The App has no backend of its own. It communicates only with:
- Your own Proxmox VE server(s) — the host addresses you enter. All traffic (API calls and the VNC console) goes directly between your device and your own infrastructure, over TLS. The App does not relay, proxy, log or store this traffic anywhere else.
- Apple's services — the App Store and the StoreKit payment system, for subscription purchase and entitlement verification only.
No analytics. No crash reporting. No advertising. No third-party SDKs. No tracking. The App does not collect any data about you or your device for any purpose, and there is no "user account" separate from the credentials you enter to reach your own server.
2Data the App stores on your device
| Data | Where | Why | Retention |
|---|---|---|---|
| Your PVE host address, username and API ticket | iOS Keychain (com.proxglass.auth), accessibility class After First Unlock, This Device Only |
Remember your login so you don't re-enter it every launch | Until you sign out, delete the App, or restore your device from an encrypted backup policy — it never leaves the device |
| Optional saved password | Same Keychain entry | Only if you explicitly choose to save it | Same as above |
| StoreKit entitlement state | App sandbox / UserDefaults | Know whether your Pro subscription is active (verified against Apple's signed transactions) | While the App is installed |
| Pinned TLS certificate fingerprints | UserDefaults | Pin your server's certificate to block MITM (your explicit choice in Settings) | While configured |
- The Keychain entry is This-Device-Only: it is excluded from device backups and is not transferred to a new device.
- Deleting the App removes all of the above.
- No location, contacts, health, financial or other personal data is ever accessed. The App requests no iOS permission prompts and has no permission requests in its Info.plist.
3Subscriptions (In-App Purchases)
ProxGlass Pro is an auto-renewing subscription, with a 7-day free trial on the weekly and monthly plans.
- Payments are processed entirely by Apple; we never see your payment details.
- Subscriptions auto-renew at the end of each period unless cancelled at least 24 hours before the period ends. You can manage or cancel in Settings → Apple ID → Subscriptions at any time.
- A cancellation takes effect at the end of the already-paid period.
- Full terms: Apple's Auto-Renewing Subscription Terms and Conditions
4Your rights (UK GDPR / GDPR)
Because the App collects no personal data from you (and stores your own server credentials on your own device), most data-subject rights do not apply in the usual sense. If you believe the App holds data about you — for example you saved a password that contains personal information — you can:
- Access / delete it yourself: Settings → Sign Out, or delete the App.
- Object or restrict: delete the App.
- Withdraw consent: there is nothing to withdraw — no third party is involved.
- Lodge a complaint with the ICO (ico.org.uk) if you believe we have mishandled data.
Contact for any privacy question: queries@pveremote.com.
5Data retention
Data stored on-device (see §2) is retained only while the App is installed on that device. There is no server-side retention because there is no server. Support inquiries sent to the contact address above are handled by the developer outside the App and are not processed or stored by the App itself.
6Children's privacy
The App is suitable for all ages and does not knowingly collect any personal information from children under 13.
7Security
- All traffic to your Proxmox host uses TLS; you may additionally pin the server's certificate fingerprint (recommended) so a man-in-the-middle cannot present a different certificate.
- Your credentials live only in the encrypted iOS Keychain on your device.
- The VNC console connects to your server's own
vncproxyWebSocket endpoint, authenticated with a short-lived ticket — the console password is never stored.
8Changes to this policy
Material changes will be announced in the App Store "What's New" field and by email if a contact address is on file. The effective date above will be updated.