Pocket Bench: Privacy policy
. This page applies from the app’s first release.
Pocket Bench is made by Bounceback Studios (“we”, “us”), the registered business name of a sole trader in Australia, ABN 24 362 033 828. Contact: support@bouncebackstudios.app.
This policy explains what Pocket Bench does with your information. We are the party responsible for the data this policy describes.
1. The short version
- Pocket Bench has no account and no sign-up.
- We do not run a server for the app. Nothing you enter in the app is sent to us.
- The only information we receive from you is an email, if you choose to send us one.
- The app contains no advertising and no analytics or tracking software.
- Some tools connect to servers that you run. The app talks only to the server addresses you add to it yourself.
2. What you enter and where it is kept
Some tools work with a server of your own. To use one you add that server: its address, a name, and the sign-in details the server needs (such as a password, an API token or a request header).
- Server addresses, names and settings, the user name or header name for a server’s sign-in, the list of tools you have added, which server each tool uses, and the fingerprints of certificates you have accepted are stored in the app’s storage on your device.
- Passwords, tokens and other sign-in secrets are stored in your device’s secure storage (the Keychain on iPhone and iPad, Keystore-protected storage on Android). They are set to stay on this device: they are left out of Google backup on Android, and on iPhone and iPad they are not restored to a different device.
- The other items in this list can be included in your device’s own backup (iCloud or a computer backup on Apple devices, Google backup on Android) if you have backups turned on. Those backups are run by Apple or Google under their terms, not by us.
3. What the app sends, and to whom
- The app sends your sign-in details and its requests only to the server addresses you entered. It does not contact any other server.
- The Home screen shows a short live status for each tool. To do that, while Home is open, the app contacts servers it has already reached successfully, at most about once a minute for each tool, without you tapping anything.
- If you enter an address that starts with
http://rather thanhttps://, your sign-in details and the data shown travel unencrypted over your network. Usehttps://where your server supports it. - If your server uses a self-signed certificate, the app shows you that certificate’s details and fingerprint and sends nothing to that server until you accept it. Compare the fingerprint with the one your server shows before you accept. After that the app trusts that one certificate for that server only, without checking the name written in it, and stops connecting if the certificate changes.
4. Information from your servers
Tools show information that your servers hold, for example a list of virtual machines or a log of DNS queries. A DNS query log can include the website names looked up by other people and devices on your network, and their network addresses. The app shows this on screen only. It does not save it and does not send it anywhere else. You are responsible for having the right to view the data on the servers you connect to.
5. Information about your device
The “About this device” screen reads your device’s maker, model, system name and version, and memory, and shows them to you. This is not stored and not sent anywhere.
6. Crash and diagnostic reports
The app has no crash-reporting software of its own. Google Play and Apple may show us combined install, crash and performance figures from people who have chosen to share them with Google or Apple. We do not link those figures to you.
7. Permissions
The app uses your device’s network connection to reach the servers you add. On iPhone and iPad, iOS asks you to allow access to devices on your local network the first time the app contacts a server there; the app uses this only to reach the servers you add. The app does not ask for access to your camera, microphone, location, contacts, photos or files.
8. Purchases
If the app offers a purchase, it is made and paid for through Apple’s App Store or Google Play. We do not receive your payment details.
9. Deleting your data
Delete a server in the app to remove its address, settings and stored secret. Uninstalling the app removes what it stored on the device, with one exception: on iPhone and iPad, iOS may keep the saved sign-in secrets in its Keychain after the app is deleted, so delete your servers in the app before you delete the app. Copies in your device backups are removed under Apple’s or Google’s backup rules.
10. If you email us
If you email us, we receive your email address, anything your mail app adds (such as your name) and what you write. We use it only to answer you and to fix the problem. We do not share or sell it. We keep support emails as our record of the support given, for as long as the app is available. Ask and we will delete yours sooner, unless we need it for a legal claim or the law requires us to keep it.
11. Your rights
We are based in Australia. If you are unhappy with how we handled your information, email us first and we will try to put it right.
If you are in the European Economic Area, the United Kingdom or Switzerland, we handle a support email on the basis of our legitimate interest in answering you. You have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to complain to your data protection authority. We will answer within a month.
12. Children
Pocket Bench is a tool for adults who run their own servers. It is meant for people aged 18 and over and is not directed at children. The app itself collects no personal information from anyone. If you think a child has emailed us personal information, tell us and we will delete it.
13. Changes to this policy
If the app changes in a way that affects this policy, the new policy will be published at this address, with a new date at the top, before that version of the app is released. Every change is listed, with its date and the full text of the earlier version, at https://bouncebackstudios.app/pocket-bench/privacy/changes/.
14. Contact
Bounceback Studios (ABN 24 362 033 828), support@bouncebackstudios.app