NodeFinch Privacy
Data and collection
NodeFinch stores server and node details, metrics, traffic, billing and lease records, amounts, events, exchange rates and diagnostics in a local database. It also stores your preferences on your device. Authentication secrets are stored in the system Keychain with device-only protection. Once you configure a connection, the app directly contacts the specified HTTP(S) monitoring service; Komari also uses WebSocket to retrieve snapshots. The app supplies API keys, Basic credentials, cookies or login information to the corresponding monitoring source according to your selected authentication method. SSH connects to your chosen host to read Linux metrics; the private key is used for signing, not sent to the host as raw key material.
Purposes
This information is used to display server status, traffic and renewal records, convert amounts and keep diagnostic results. When you initiate network diagnostics, the app makes HTTPS, TCP or DNS requests; HTTPS checks do not include authentication information or cookies from your monitoring source. The app also automatically requests exchange rates from Frankfurter. In the current version, these requests use only currency pairs as business parameters; server names, amounts and source credentials are not sent as business parameters in these requests. Requests are not limited to manual refreshes. The widget reads local summaries and language preferences through a shared container on the same device. The shared summary contains no authentication credentials, source URLs or full database; the widget has no network client. Lease reminders use local notifications with system permission.
Third parties and sharing
The app's network requests reach your configured monitoring or SSH services, the destinations you choose to check and relevant DNS services, and Frankfurter for automatic exchange rates. Only when you tap Look Up while adding a domain on the Renewals page, or Update from Registry on a domain's details, does the app first download the public list of lookup services from IANA, which contains no domain or personal data, and then send only that domain name to the matching registry's RDAP service to find its expiry date and registrar. These services may receive connection information such as your IP address and determine their own logging and retention practices. The app has no advertising, does not upload feedback automatically and has no NodeFinch account backend; anonymous in-app usage statistics are described below.
You can export a JSON/CSV backup, then select a destination through system sharing. This can send information off your device but does not automatically deliver it to the operator. Backup exports exclude Keychain authentication secrets but may contain addresses, amounts, notes or source URLs. Secrets in free-text fields are not guaranteed to be removed automatically; review files before sharing.
You can also describe a problem on the app's Feedback page and choose whether to attach a diagnostic report, then send it by email to [email protected] through the system Mail app. Nothing is sent until you tap Send in the email, and you can preview the report first. The diagnostic report contains the app version, language and region, whether you have Pro, whether anonymous usage statistics are on, device model, system version, the number of servers and of each connection method, and the type and time of recent errors. It does not include server addresses, usernames, passwords, private keys, fingerprints, notes, amounts or IP addresses.
Anonymous usage statistics in the app
The app records usage anonymously to help us understand which features are used and improve the app. This covers when the app is opened or moved to the background, which screens you open, which features you use, how you add a server and whether it succeeds (failures are recorded only by broad category, such as unable to connect or authentication failed), whether a widget has been added, when the paywall appears and where it was opened from, and the results of purchases, restores and renewals (recorded by plan or billing-period type only). These records are sent with basic information such as the app version, system version, device model, language and region settings, time zone, screen size, network type (Wi-Fi or cellular), whether it is a test build and a per-session number, along with a random identifier that the analytics component generates on your device to tell devices apart. It is not an advertising identifier and is replaced if you delete the app.
Statistics never include server addresses or names, usernames, passwords, private keys, notes, amounts or error text. They are not linked to your identity and are not used for tracking. They are sent to the analytics service the operator uses, provided by AirBuild. That service may see your IP address when statistics are sent, but it is not used to work out your location for the statistics. You can turn off "Anonymous Usage Statistics" in the app's settings at any time. The app then stops recording new statistics.
Website hosting
This website uses Cloudflare for website hosting, content delivery and network security. When you visit the website, Cloudflare may process your IP address, network request and traffic-routing information, and device or system configuration information to deliver pages, maintain service security and troubleshoot issues. Retention of this technical data depends on the services used, their configuration, the purposes of processing and applicable legal requirements; we do not promise that all hosting or security logs are deleted within a fixed number of days. For Cloudflare's data-handling and retention principles, see its Privacy Policy: https://www.cloudflare.com/privacypolicy/ .
Retention and deletion
The app keeps the records described above locally. Local clearing deletes database records, attempts to remove referenced Keychain secrets and cancels pending local notifications; it does not modify remote servers. It does not guarantee removal of widget summaries, temporary exports, system backups, shared files or third-party copies.
The current version does not provide in-app iCloud sync. System device backups may still include the local database, so the absence of in-app cloud sync does not mean these records are excluded from device backups.
Closing support cases
Our goal is to delete support emails and any attachments you voluntarily provide 30 days after a case is closed. To work toward this goal, we record the closure time manually and move the relevant email conversation to trash when we close the case. According to Resend's documentation, moving a conversation to trash schedules its deletion for 30 days later.
If the case is reopened and the conversation restored, the original deletion deadline is cleared. When the case is closed again, we record the new closure time and move the conversation back to trash.
Email provider retention
Resend's public documentation states that email and log data is retained for 30 days on active Free, Pro and Scale accounts, and backups persist for 7 days. These are the provider's separate retention rules. They do not establish a single deadline counted from our case-closure time, or guarantee that each email will remain available until 30 days after closure.
Deleting a conversation does not mean every copy of its emails, attachments, logs and backups is erased at the same time. Copies in your own mailbox or other recipients' mailboxes are outside our control. These email-service rules do not define retention for local app records or website hosting and security logs, which are addressed separately in this policy.
Retention rules: https://resend.com/security/gdpr
Conversation deletion: https://resend.com/docs/api-reference/inboxes/delete-thread
Your choices and controls
You initiate network diagnostics, exports and feedback emails, and choose whether and with whom to share. Local notifications depend on system permission, which you can withdraw through the system's notification-permission controls. Local clearing has the limits described above: it does not revoke credential permissions at remote services or delete copies already sent to others. You can turn off anonymous usage statistics in the app's settings at any time. Automatic exchange-rate requests are part of the current app behavior; manually editing an exchange rate should not be understood as stopping automatic network requests.
Operator and privacy contact
NodeFinch is operated by Stepania H. For privacy questions about the app or this website, contact [email protected].
When you email us, we process your email address, subject, message, any attachments you voluntarily provide and the correspondence needed to respond to and handle your request. Support email is handled through Resend. Please do not send passwords, private keys or sensitive information unrelated to your request in messages or attachments.