iOS app privacy · clear by design

Nimbus Direct App Privacy

This policy covers the Nimbus Direct iOS app and Liam Jayden Schleiß as its developer and distributor. The operator of each self-hosted Nimbus server has a separate privacy responsibility and may provide a separate policy in the app.

No advertising or trackingNimbus contains no advertising, cross-app tracking, or third-party analytics integration.
Local protectionPreferences stay on the device, while the mobile refresh token is protected by the iOS Keychain.
Your selected serverThe app connects directly to the Nimbus server you choose. The app developer does not operate or control third-party instances.
01

The self-hosted model

Scope and responsibility

This policy covers the standard Nimbus Direct iOS app distributed by Liam Jayden Schleiß. The app is a client: it communicates directly with the Nimbus server address selected by you and has no developer-operated central account, analytics, or advertising backend. When native push is enabled for the official app, the selected server may use the developer-operated Nimbus Push Relay solely to forward a notification to Apple.

The app developer does not operate, administer, or control third-party Nimbus instances. The organization that issued your account and operates the selected server is separately responsible for data processed by that instance, including hosting, SMTP, reverse proxies, retention, infrastructure records, and support content.

Two separate policiesThis App Privacy Policy is always available in the iOS app. When your selected server publishes an operator policy, the app shows it as a separate “Server Operator Privacy Policy” link. One policy never replaces the other.

The Nimbus web panel and any processing performed by a self-hosted server are outside this App Privacy Policy and belong in the server operator’s own privacy information.

02

Data inventory

Information the app handles

The app handles the following categories on your device or transmits them directly to and from your selected Nimbus server. The app developer does not receive this information merely because you use the app; only the optional push-delivery subset identified below may pass through the Nimbus Push Relay.

Account and organizationEmail address, display name, internal user and customer identifiers, customer or company name, support email, plan, role, status, language, locale, time zone, and account timestamps returned by your server.Displaying your account, localizing the app, and enabling support.
Authentication and securityPassword, authenticator or recovery code during sign-in; short-lived access token; rotating refresh token; 2FA status and active mobile-session information.Authenticating directly with your selected server and maintaining a secure session.
Device, session, and networkSelected server address, device name, platform, app version, APNs token when enabled, and connection metadata such as the IP address visible to the selected server.Connecting to the server, managing devices, push delivery, and diagnostics.
InfrastructureAssigned clusters, nodes, VMs and containers; VMID, name, type, status, CPU, memory, storage, uptime, IP and interface information, guest configuration, snapshots, ISO state, permissions, and Proxmox task results.Displaying and operating the infrastructure assigned to your account.
Actions and activityPower, snapshot, ISO, console, notification, maintenance, support, and security requests and the task or audit results returned by the server.Providing requested app functions and showing recent activity.
Support contentTicket subject, messages and replies, category, priority, linked resource, author, assigned administrator, status, read state, and timestamps.Responding to support requests and preserving the support history.
User-provided files and labelsISO file bytes, original filename, size, checksum, destination and upload state; snapshot names and descriptions; API-key names and permission selections.Providing media, recovery, automation, and integration features.
Notifications and maintenanceNotification preferences, events, titles, messages, read state, maintenance or incident details, affected resources, time windows, and action locks.Showing service information and delivering optional push notifications.
Optional Nimbus Push RelayAPNs device token, production or sandbox environment, notification title and body, minimal notification/resource/collapse identifiers, sending-panel installation ID and software version, and security metadata such as timestamp, nonce, and source IP.Authenticating the selected server, preventing abuse, forwarding the notification to Apple, and returning the APNs result.

Passwords and biometrics

Your password and 2FA response are sent over HTTPS only to the selected Nimbus server for authentication. The app does not retain the plain password. Face ID, Touch ID, or Optic ID matching is performed by iOS; neither the app developer nor the selected server receives a facial image, fingerprint, iris pattern, or biometric template.

Console sessions

Console screen traffic, terminal output, keyboard input, pointer events, and pasted text pass in real time between your device and the selected Nimbus server, which relays them to Proxmox. The standard app does not record console video, terminal transcripts, or individual keystrokes.

03

Your iPhone

Information stored or processed on your device

  • The selected Nimbus server URL, language, appearance, and biometric-lock preference are saved locally.
  • The mobile refresh token is stored in the iOS Keychain. The short-lived access token is kept in app memory.
  • If push notifications are enabled, the APNs token is stored locally and registered with the selected Nimbus server.
  • Biometric matching is performed by iOS. Nimbus never receives a facial image, fingerprint, iris pattern, or biometric template.
  • When you upload an ISO, the app reads only the file you explicitly select through the iOS file picker.

Information the standard app does not request

LocationContactsPhotos and cameraMicrophoneHealth and fitnessPayment dataAdvertising identifierBrowsing history
04

Purpose limitation

How information is used

  • Connect to the Nimbus server selected by you and authenticate your account.
  • Display the account, infrastructure, activity, maintenance, and support data returned by that server.
  • Send actions you request, such as power, console, snapshot, and ISO operations, to that server.
  • Store local preferences and protect the mobile session using the iOS Keychain and optional device authentication.
  • Register for and display push notifications only when you enable the feature.
  • Maintain app security, compatibility, and reliability without advertising or cross-app tracking.

The server operator determines the legal basis for processing performed by its instance. Push notifications require your iOS permission and can be disabled at any time. The app developer does not use data from your selected server for independent advertising, profiling, or analytics purposes.

No advertising profileNimbus does not sell personal information, use it for targeted advertising, combine it with third-party data for advertising measurement, or track activity across other companies’ apps and websites.
05

Controlled data flows

Recipients and external services

The app communicates with the following recipients only when required by the selected function:

  • Your selected Nimbus server and its operator receive login details and app requests and return account, infrastructure, support, security, and activity data.
  • Nimbus Push Relay, operated by the app developer, temporarily processes the APNs token, notification title/body, minimal delivery identifiers, authenticated panel installation ID and software version, and security request metadata when the official app's optional native push is enabled. It does not provide or receive Nimbus accounts, Proxmox credentials, general infrastructure records, support conversations, analytics, advertising, or profiling data.
  • Apple Push Notification service receives an APNs device token and notification payload when you enable push notifications.
  • iOS and Apple platform services provide Keychain storage, biometric authentication, networking, and system file selection on the device.
  • Proxmox, email, hosting, network, and reverse-proxy providers may receive data through the selected Nimbus server. Those services are selected and controlled by the server operator, not the app developer.

Apart from the minimal notification content and identifiers processed transiently for optional official-app push, the app developer does not receive a copy of your account, infrastructure, support, or console data and does not choose the processors used by third-party Nimbus operators.

06

On-device storage

Local storage and Keychain

The app stores the selected server URL, language, appearance, and biometric-lock preference locally. Its rotating refresh token is stored in the iOS Keychain and the short-lived access token is held in memory. Signing out removes the stored mobile credentials; deleting the app removes its ordinary local data under iOS behavior.

The iOS app does not use browser cookies, advertising identifiers, third-party analytics SDKs, tracking pixels, or cross-app behavioral tracking. The Nimbus web panel has separate storage behavior governed by the server operator’s policy.

07

Storage periods

Retention and deletion

  • Server URL and app preferences remain on the device until changed, reset, or removed with the app.
  • The short-lived access token remains in memory. The rotating refresh token remains in Keychain until sign-out, revocation, expiry, account removal, or app credential cleanup.
  • APNs registration data remains locally and at the selected server until push is disabled, the device is unregistered, the token becomes invalid, or the account is removed.
  • The Nimbus Push Relay does not retain APNs device tokens or notification titles/bodies after the delivery request. It may retain a panel's public installation key, status, delivery counters, and short-lived replay-prevention nonces for service security, abuse prevention, key rotation, and revocation.
  • A file selected for an ISO upload is accessed for that requested transfer; the app does not keep a separate managed ISO library.
  • The app developer does not retain your Nimbus account, infrastructure, console, support, audit, or task data on a central developer service.
Server retention is separateYour server operator determines how long its account, audit, task, support, notification, email, infrastructure, and proxy records remain. Consult the separately labeled Server Operator Privacy Policy or contact that operator.
08

Control and transparency

Your rights and choices

Depending on your location, you may have the right to request access, correction, deletion, restriction, objection, or portability of your personal information and to withdraw consent for optional processing. Users in the European Economic Area may also complain to their competent data-protection supervisory authority.

  • Change language, biometric-lock, notification, and appearance preferences in the app or iOS Settings.
  • Disable push permission in iOS Settings and unregister the device from Nimbus.
  • View and revoke active mobile and browser sessions.
  • Request account access, correction, or deletion from the provider that issued the account.

For questions about the app developer’s own processing, use the privacy contact below. For account, infrastructure, support, server-log, or retention requests, contact the operator that issued your account. Deleting the app does not delete information held by the selected server or Proxmox.

09

Protection measures

Security

The app requires normal iOS transport security, stores the rotating refresh token in Keychain, keeps the access token in memory, can use device biometric protection, and receives only short-lived console handoffs. It does not provide a certificate-bypass mode.

No internet service can guarantee absolute security. Users should protect their credentials, enable MFA or passkeys, keep devices updated, and immediately report suspected unauthorized access.

International transfers

Apple may process push and platform-service data in countries outside your country of residence. Optional official-app push data may first pass through the Nimbus Push Relay operated by the app developer. A selected Nimbus server and its operator’s providers may do the same; the operator is responsible for those providers and any legally required transfer safeguards.

Children

Nimbus Direct is an infrastructure administration service and is not designed or intentionally offered to children. Accounts are provisioned by an infrastructure provider or organization.

10

Questions and requests

Contact and policy updates

App developer and privacy contactLiam Jayden Schleiß
Beethovenstraße 2
76593 Gernsbach
Germany
[email protected]
Your Nimbus server and accountFor server-side data, contact the infrastructure provider that issued your account through its separately supplied operator policy, Support Center, or account contact.

We may update this App Privacy Policy when app features, legal requirements, or Apple platform services change. The effective date at the top of this page identifies the current version. Changes made by a Nimbus server operator belong in that operator’s separate policy.