Privacy Policy

Last updated: 29 October 2026. The German version is authoritative.

1. Controller

The controller under the General Data Protection Regulation (GDPR) is:

Mario Fellner
Marchfeldstraße 27/133
1200 Wien
Austria
E-mail: support@remotenx.app

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Overview

• remoteNX needs no account. We know neither your name nor your e-mail address unless you write to us.
• There is no tracking, no advertising, no advertising IDs and no sharing with data brokers.
• Crash reports and usage statistics are off by default and are sent only after you consent.

3. Data in the app

Connections, groups, tunnels, Horizon servers, snippets, settings, credentials and SSH keys are stored on your device. Passwords and private keys are kept in the device keychain.

iCloud sync: if you turn sync on, connections, tunnels and identities are synchronised between your devices through your own iCloud account. Passwords and private keys only sync if you also turn that on; they then travel through your iCloud Keychain. iCloud is provided by Apple, and Apple's privacy policy applies. We have no access to this data.

Connections to your servers (RDP, Horizon, SSH) go directly from your device to those servers, not through our infrastructure. Live Activities are created locally on the device. Session previews (the last picture of a session on its tile) stay on the device, encrypted and not backed up; you can turn them off in Settings.

4. Crash reports (optional)

Under Settings → Privacy → Share Crash Reports you can agree that remoteNX sends a report after a crash. This is off by default.

• Content: stack trace, error type, app and operating system version. Before sending, the app removes host names, user names, IP addresses and terminal content, as well as paths that could contain such data.
• Processing: on our own server in the EU (Hetzner Online GmbH, data centre in Germany) with the open-source software GlitchTip. Hetzner acts as a processor.
• Retention: reports are deleted after 90 days.
• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in Settings; no further reports are sent after that.

5. Anonymous usage statistics (optional)

Under Settings → Privacy → Share Usage Statistics you can agree that remoteNX sends anonymous usage signals. This is off by default.

• Content: fixed events such as app launch, connection attempt, success or failure (protocol and failure type only) and the use of certain features (for example tunnels, Quick Connect, snippets, Live Activity), plus the app and operating system version. Free text, host names, user names and terminal content are excluded, and so are the device model, language, region and time zone.
• Identifier: none that persists. The events of one use carry a random session number that lives only in memory and is replaced at every launch and after an hour of inactivity. Your IP address is removed before the statistics software and is not stored.
• Service: Aptabase (open-source software), run by us at stats.remotenx.app on our own server at Hetzner in Germany (Hetzner Online GmbH as processor). Events are deleted after 12 months.
• Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

6. Diagnostics from Apple (MetricKit)

remoteNX uses Apple's MetricKit to evaluate crash, hang and performance reports on the device. The app itself does not pass these on; it only writes a summary to the local diagnostic log. If you have agreed in your device's system settings to share analytics with app developers, Apple provides us with aggregated diagnostic data. Apple's privacy policy applies to this.

7. Support and feedback

If you write to us by e-mail or through Help & Feedback in the app, we process your e-mail address (if given), your message and – if you attach it – the diagnostic log to handle your request. From the app you write to us by e-mail to support@remotenx.app; the mailbox is hosted by Microsoft 365 (Microsoft Ireland Operations Ltd., processor, storage in the EU). Messages from the website's contact form are stored on our own server at Hetzner in Germany and forwarded to the same mailbox. The legal basis is our legitimate interest in answering your request or steps prior to entering a contract (Art. 6(1)(f) or (b) GDPR). Feedback e-mails are kept for 12 months and then deleted.

Contact form

With the form on the support page you can write to us directly.

• Purpose: answering your request.
• Data: name (optional), e-mail address, subject and message. Your IP address is not stored; it is only used briefly in memory, as an encrypted key, for the per-hour request limit. To keep spam out, the form measures how many seconds passed since the page loaded and contains an invisible field that people leave empty; neither is stored.
• Location: our own server at Hetzner Online GmbH in Germany; a notification goes to our support mailbox.
• Retention: 12 months, after which the message is deleted automatically.
• Legal basis: Art. 6(1)(b) GDPR where your request concerns a contract or steps towards one, otherwise our legitimate interest in answering it (Art. 6(1)(f) GDPR).

Beta through TestFlight

The beta runs through a public TestFlight link from Apple. We do not learn your e-mail address that way – unless you share it with Apple for TestFlight or write to us yourself. Through TestFlight we receive crash data and the feedback you send there; Apple's terms apply to this as well.

8. This website

This website uses no cookies, no analytics and loads no third-party content (no CDNs, no external fonts). When you visit it, the web server processes technically necessary data such as IP address, time, requested address and browser identifier. The web server (Caddy) keeps minimal access logs for security; they are deleted automatically after 14 days. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The website is hosted by Hetzner Online GmbH in Germany.

9. Managed devices

If your organisation deploys remoteNX through an MDM, it can provide connections, certificates, keys and policies and, for example, lock crash reports and usage statistics off. Your organisation, not us, is responsible for that processing.

10. Recipients and third countries

We do not sell data or share it for advertising. The only recipients are the processors named above. We do not intend to transfer data to countries outside the EU or EEA.

11. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Because we do not link the optional data to you as a person, we usually cannot attribute it to you; write to us anyway and we will help: support@remotenx.app.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

12. Changes

We update this policy when the app or the legal situation changes. The version published here applies.