Privacy Policy

Last updated: 8 October 2026

In short: PocketADM is open-source, self-hosted software. The app collects no personal data. It talks to the servers you add, over a direct connection. We never see your servers, your credentials, your files, or your usage. The one service of ours it can use is an optional push relay that forwards notifications to your phone and keeps nothing but the phone's push token.

Who we are

PocketADM ("the app") is an open-source command center for your own self-hosted servers, published by Maximilian Paasch. The app is a client: it connects to PocketADM server software that you install and run on your hardware.

What data the app collects

None on our side. There is no PocketADM analytics, no tracking SDK, no advertising, and no account with us. The only server of ours the app talks to is the optional push relay described below.

Data that stays on your device

To function, the app stores the following locally on your device only:

The address, name and login token of each server you add.
Your preferences (theme, terminal settings, last-open chat).

This information is kept in the app's local storage and is never transmitted to us. Removing a server, or deleting the app, removes it.

Data that goes directly to your own server

When you use PocketADM, your device communicates directly with the server you added (your admin password, commands, chat messages, files). This traffic goes only between your device and your server. It does not pass through us.

Push notifications (optional)

Your own server cannot send notifications to an iPhone by itself — that takes the app developer's key with Apple. If you allow notifications, the app therefore registers its Apple push token with our relay at pocketadm.com/push and receives a random ID in return, which it hands to your server. When your server has something to tell you (a message from its watch, the assistant waiting for your OK), it sends the notification to the relay, which passes it to Apple's push service and forgets it.

The relay stores only the push token, the random ID, which app build it belongs to and when it was last used. It does not store or log what a notification says, and it does not know which server a phone belongs to.
With previews off (in the app's notification settings) your server sends only "New message from your server", so the relay never sees the content.
Turning notifications off in the app removes the ID from your server. When you delete the app, Apple invalidates the token and the relay deletes it the next time it is used.

AI features (bring your own key)

If you enable the AI assistant, requests are sent from your server to the AI provider whose API key you configured (e.g. Anthropic, OpenAI, OpenRouter), or to a local model you run yourself. Those requests are governed by that provider's privacy policy. We are not a party to them and never receive your API keys.

Camera & local network

Camera is used only when you choose to scan a pairing QR code. No images are stored or sent.
Local network access is used to reach servers you add on your home network (e.g. 192.168.x.x).

This website (pocketadm.com)

The landing page is a static site hosted on our own server. It sets no cookies, uses no analytics and no advertising, and loads no resources from third-party servers — fonts, icons and images are served from the same host.

As any web server does, ours logs each request (IP address, time, transferred volume). These logs exist solely for the technical security of the server (attack detection and mitigation), are deleted on a regular schedule and are never combined with other data. This site has no user accounts and no newsletter.

Children

PocketADM is a developer/administration tool and is not directed at children.

Changes

If this policy changes, the "last updated" date above will change. Material changes will be noted in the app's changelog.

Contact

Questions about privacy: privacy@pocketadm.com, or open an issue on GitHub.