PocketTop is an iOS app that lets you monitor and act on Linux machines you
control. This policy describes what data the app touches, what it stores, and
what — if anything — leaves your device.
The short version
We do not collect any personal data.
We do not run a server that talks to the app. PocketTop talks only to the Linux machines you point it at.
No analytics, no crash reporting, no third-party SDKs.
Your credentials live on your device, in the iOS Keychain.
What PocketTop stores on your device
When you add a machine, PocketTop saves the following locally on your iPhone or iPad:
The host address, port, and username you entered.
The SSH host-key fingerprint, used to detect a changed server identity.
The TLS certificate fingerprint of the agent installed on your machine, used for certificate pinning.
The API key the agent generates during installation.
Any SSH password or SSH private key you supplied, stored in the iOS Keychain.
This data never leaves your device. It is used only to connect to the machines you
added. Removing a machine deletes its credentials from local storage and from
the Keychain. Deleting the app removes everything.
What PocketTop sends over the network
PocketTop makes two kinds of outbound connections, both directly from your
device to the Linux machine you added:
SSH (port 22 by default) — used once during initial setup to
upload and run the agent installer, and occasionally afterwards if the agent
needs to be reinstalled or recovered.
HTTPS to the on-host agent (pockettopd, default
port 443) — used for steady-state polling of metrics and to send process-kill
requests. The app pins the agent's self-signed TLS certificate; if the
certificate ever changes, the connection is refused.
No data is sent to the developer, to Apple beyond standard App Store telemetry,
or to any third party.
What PocketTop does not do
It does not phone home. There is no PocketTop backend.
It does not include any analytics, telemetry, advertising, or attribution SDK.
It does not access your contacts, photos, location, microphone, or camera.
It does not transmit your machine's metrics to anyone other than your own device.
Permissions PocketTop asks for
Local Network — required by iOS to allow connections to
private-range (RFC 1918) and link-local addresses, which is where most homelab
machines live. Without this permission, iOS blocks the connection at the OS level.
Children
PocketTop is not directed at children under 13. It does not knowingly collect
any information from anyone.
Open source
PocketTop is open source under GPL-3.0. You can read the full iOS app and Go
agent source on GitHub:
github.com/bardiabarabadi/PocketTop.
If a claim in this policy doesn't match the code, the code is what's in the
binary — please open an issue and we will fix the policy.
Changes to this policy
Material changes will be reflected in the "Last updated" date at the top of
this page and announced in the GitHub repository.