Aprox talks directly to the Proxmox VE and Backup Servers you add. There is no Aprox account, no cloud service in between, and no telemetry collected by Aprox itself. Your credentials stay on your device, and certificates are checked on every connection. This article explains what Aprox stores, where, and what it connects to.

What Aprox connects to

Destination When
Your Proxmox VE and Backup Servers Always. This is all Aprox needs to work.
The App Store or Google Play For purchases and to check your Aprox Pro status.
The developer's promotion service Only on the free plan, for the promotions it shows. See Promotions on the free plan.
GitHub, or your mail app Only when you choose to send a diagnostics report or report an issue.

Aprox has no relay or push server. Even alerts are raised by the app itself, which checks your servers directly.

Where your credentials are stored

  • iPhone, iPad and Mac: passwords and API token secrets are kept in the Keychain as "this device only". They are not synced through iCloud Keychain and are not included in backups that could be restored to another device.
  • Android: they are kept in encrypted storage on the device that is not backed up.
  • Passwords are saved only if you turn on Save password to Keychain (Android uses the same label), and only after the server has accepted them.
  • Removing a server also deletes its saved password and token secret from the device. Nothing changes on the server.

Tip

For the narrowest access, sign in with an API token that has only the privileges you need. Proxmox lets you limit a token to less than its user can do. See Create an API token.

Servers are not synced

Your server list stays on the device where you created it. Add your servers on each device you use. The watch is the exception: it gets everything it shows from its phone, and the credentials never leave the phone.

Certificates

  • Aprox checks the server's certificate on every connection.
  • A self-signed certificate, as Proxmox installs by default, is shown to you with its SHA-256 fingerprint. Once you trust it, Aprox pins it and accepts only that exact certificate from then on.
  • If the certificate changes, Aprox stops and warns you before connecting again.
  • Skip TLS validation exists for special cases but is discouraged and shows a warning. A pinned certificate always takes precedence.

See Self-signed certificates.

Console bridge on the Mac

When you use an external VNC viewer on the Mac, Aprox opens a local bridge. It listens on 127.0.0.1 only, accepts exactly one connection, and closes afterward. Nothing on your network can connect to it. See External VNC viewer.

Diagnostics reports

A diagnostics report is only created when you tap Collect Diagnostics or Copy Diagnostics, and only sent when you share it. Hostnames, usernames and credentials are redacted. It contains the app version, platform, how Aprox is set up (for example the number of servers and the sign-in methods), which requests failed, and this session's log. See Diagnostics report.

Promotions on the free plan

On the free plan, promotions come from the developer's own service. Aprox does not use an advertising identifier and does not ask to track you. The service records a random per-installation ID and which promotion was shown or tapped, for statistics only. With Aprox Pro, the promotion service is never contacted. See Promotions on the free plan.

Privacy policy

The full privacy statement is at aproxapp.de/privacy-statement. It is also linked under Settings › Aprox Pro › Privacy Policy.