Privacy Policy
Your server stays yours. So does your data.
Effective October 9, 2026
The short version
- ServerMage has no accounts, analytics, advertising or tracking.
- We, The Black Well Foundry, don't collect, see, sell or share information about you, your servers or your apps.
- Your iPhone talks straight to your own server. What ServerMage stores lives on your iPhone and on your server, not with us.
- If you email us, we use your message only to reply.
This policy covers the ServerMage iPhone app, the ServerMage Agent it installs on your server, and this website, www.servermage.app. ServerMage is made by The Black Well Foundry LLC (“we”, “us”). The rest of this page explains each part in detail.
What we collect
Nothing through the app. ServerMage doesn't send us your server addresses, sign-ins, app lists, settings, files, usage or crash reports, and it contains no third-party analytics, advertising or tracking code. We don't have a ServerMage account system, so there's no profile of you on our side.
What stays on your iPhone
To manage your servers, the app keeps a small amount of information on your iPhone:
- Your servers: each server's name, address, SSH user name and port, and the fingerprints ServerMage uses to recognise it. These are kept in the iOS Keychain, only on this iPhone, and aren't synced to iCloud.
- A device key: a key created on your iPhone, kept in its Secure Enclave where possible, that signs every request to your server. It never leaves the iPhone.
- App preferences: things like which alerts you've dismissed and which catalog apps you've already seen.
Your SSH password or key is used only while you add or repair a server, and isn't stored. Removing a server from the app deletes what it stored about that server.
What stays on your server
The ServerMage Agent runs on your own server and keeps what it needs there: its settings, the apps it installed and their settings, secrets for those apps (encrypted), backups, health history and an activity log. All of it is under your control on your hardware. We have no access to your server and no way to read anything on it. Removing ServerMage from a server removes the Agent and, if you choose, its apps and their data.
Connections ServerMage makes
- iPhone to your server. The app connects directly to your server on your local network, over SSH for setup and repair, and over an encrypted, authenticated connection to the Agent after that. iOS asks for your permission to use the local network.
- The app catalog. Your server downloads the signed list of available apps and Agent updates from catalog.servermage.app, which is hosted on Cloudflare. Like any website, the host sees your server's public IP address when it does. The request carries no account, device or personal identifier.
- App and software downloads. When you install or update an app, your server downloads it from that app's public image registry (for example GitHub Container Registry or Docker Hub). During setup it may install Docker from Docker's or your Linux distribution's official repositories. Those services see your server's IP address under their own privacy policies.
- Remote access (Pro, optional). If you turn on remote access, ServerMage uses a Cloudflare API token you create to set up a Cloudflare Tunnel in your own Cloudflare account. The token is encrypted and kept on your server; it isn't sent to us. Traffic to the apps you choose to share then passes through Cloudflare, under your agreement with Cloudflare and its privacy policy. Remote access is off unless you turn it on, for each app separately.
- Links you tap. Documentation and setup links (for example to an app's official docs or to Cloudflare's dashboard) open in your browser on those websites, under their own policies.
The apps you install
Jellyfin, Immich, Nextcloud, Pi-hole, Uptime Kuma and the other catalog apps run on your server and are made by their own projects. ServerMage sets them up, but what they store, and any connections they make, are governed by each app's own settings and privacy policy.
Purchases
When ServerMage offers its Pro upgrade, purchases are made through Apple's App Store. Apple handles payment, and we never receive your payment details. The app checks your purchase with Apple on your iPhone to unlock Pro features.
This website
www.servermage.app has no cookies, analytics, advertising, forms or scripts, and loads no third-party fonts. Our web host keeps standard server logs (such as IP address, browser type and the pages requested) to run and protect the site.
If you contact us
When you email us, we receive your email address and whatever you include, such as diagnostics you choose to copy from the app. We use it only to help you and reply, and we don't sell or share it. Ask us at any time to delete your messages.
Children
ServerMage is a tool for managing home servers and isn't directed at children under 13. We don't knowingly collect information from children.
Your rights
Depending on where you live, you may have rights to access, correct or delete personal information a company holds about you. Because we don't collect information through ServerMage, the only information we might hold is email you've sent us. Write to us and we'll show it to you or delete it.
Changes
If ServerMage changes how it handles information, for example by adding push notifications, we'll update this page and its effective date before the change reaches you, and we'll describe significant changes in the app's release notes.
Contact
The Black Well Foundry LLC
Email: hello@theblackwell.app
Website: www.theblackwell.app