Przeczytaj po polsku

Privacy Policy — Outpost

Last updated: July 29, 2026

1. Who we are

Outpost is a mobile app for monitoring self-hosted infrastructure (Proxmox VE, Proxmox Backup Server, and SSH-managed servers, including Linux and Windows Server), created and maintained by Marek Otulakowski. This privacy policy applies solely to the Outpost app available on the App Store and Google Play.

2. What data the app processes

The app does not require creating an account or signing in. Data you configure in the app — your servers' addresses and ports, display names, SSH keys, API tokens, usernames and passwords for your own servers, SSH host key and TLS certificate fingerprints, and app settings (theme, language, refresh interval, biometric lock) — is stored exclusively locally on your device, in encrypted form (Keychain on iOS, a Keystore-backed mechanism on Android). None of this data is ever sent to any server belonging to the app's author, because no such server exists.

The app does not collect personal data (name, email address, phone number, user location), does not use user accounts, displays no ads, and contains no analytics or tracking tools of any kind.

3. What the app connects to

The only network connections Outpost makes go directly from your device — with no server of the app's author acting as an intermediary:

• Servers you configure yourself (Proxmox VE, Proxmox Backup Server, SSH hosts) — the connection is made exclusively from your device directly to your server, using the credentials you provide.
• ipapi.co — a best-effort location lookup (city/region/country) for a monitored server, shown on that server's detail page. Only the server's host/address is sent, no other data.
• api.ipify.org and dynupdate.no-ip.com — used only if you enable the optional Dynamic DNS (No-IP) feature and provide your own No-IP account credentials in it. Used to check your device's public IP address and report it to No-IP when it changes. This feature is off by default.

How these external services (ipapi.co, No-IP) process data is governed by their own respective privacy policies.

4. Optional iCloud sync

If you enable the optional (off by default) iCloud sync, your app settings are synced between your own iOS devices via your own iCloud account. This process takes place entirely within Apple's infrastructure, under the terms of Apple's own privacy policy — the app's author has no access to this data.

5. Data export and import

The app lets you export all of its data (endpoints, credentials, keys) into a single encrypted file, protected by a passphrase you choose yourself. You decide where to save that file or who to share it with (e.g. to move your data to a new device) — the app's author has no access to it.

6. Biometric lock

If you enable the optional biometric lock, authentication (Face ID / Touch ID / device passcode) happens entirely through standard iOS/Android system mechanisms. The app never has access to your biometric data itself — the operating system only returns a yes/no result to it.

7. Sharing data with third parties

Outpost does not share, sell, or transfer any user data to third parties, because it does not collect any on a server of its own — there is simply nothing to share.

8. Data retention and deletion

You can edit or delete any endpoint, key, identity, or token at any time directly in the app. Uninstalling the app permanently deletes all locally stored data (aside from an iCloud copy, if you knowingly enabled sync — you can remove that from your device's iCloud settings).

9. Children's privacy

Outpost is not directed at children and does not knowingly collect data from anyone of any age, since it doesn't collect personal data at all.

10. Changes to this privacy policy

If how the app works changes in the future (e.g. new features requiring data processing are added), this policy will be updated accordingly, along with the date at the top of the page.

11. Contact

For anything related to this privacy policy, you can reach the app's author at: marek.otulakowski@gmail.com.