Privacy Policy — PB Server: Unlimited & Local

1

Introduction & Scope

This Privacy Policy explains how ShanApps ("we", "us", or "our") handles information in connection with the mobile and desktop application PB Server: Unlimited & Local (also referred to as "PB Server", "App").

PB Server is an offline-first developer utility designed to orchestrate and run embedded PocketBase server instances locally on your personal device (Android, iOS, or Desktop).

Our core principle is absolute data sovereignty: We do not collect, harvest, store, transmit, or monetize any of your personal data, database collections, schemas, logs, or network traffic.

2

Data Collection & Privacy Practices

We believe in total transparency regarding how your data is handled when using PB Server:

Data Category	Collected?	Shared with 3rd Parties?	Purpose
Personal Info (Name, Email, Phone)	NO	NO	None (No account required)
Database Records & SQLite Data	NO	NO	Stored locally in app sandbox
Device & Network Identifiers	NO	NO	None
Analytics & Tracking Telemetry	NO	NO	None (No tracking SDKs)
Location & Sensor Data	NO	NO	None

No Account Registration: You never need to create an account or provide credentials to ShanApps to use the app.
No Tracking SDKs: We do not bundle Google Firebase Analytics, Google Analytics, Adjust, AppsFlyer, Mixpanel, Crashlytics, or any commercial advertising networks.
No External Server Contact: PB Server never transmits telemetry beacons or telemetry metadata to ShanApps or third-party servers.

3

Device Permissions & Technical Justifications

PB Server requests only the minimum technical system permissions required to execute a local database server on your device:

Network Access (INTERNET, ACCESS_NETWORK_STATE, CHANGE_WIFI_MULTICAST_STATE):
Required solely to bind local TCP sockets on loopback (127.0.0.1) and local network interfaces (Wi-Fi wlan0 or Mobile Hotspot) so you can connect client devices (such as a laptop browser, Flutter app, or React app) to your local database instance. No outbound traffic is sent to external cloud servers.
Foreground Service — Data Sync (FOREGROUND_SERVICE_DATA_SYNC):
Required on Android to keep the local SQLite database and HTTP REST API listener active while you switch to other apps or lock your device. This ensures ongoing database transactions, file attachments, and realtime Server-Sent Events (SSE) streams are not abruptly aborted by the operating system.
Notifications (POST_NOTIFICATIONS):
Required on Android 13+ to display the ongoing foreground status bar notification showing active server port numbers while the server process is alive.
Wake Lock (WAKE_LOCK):
Prevents the CPU from going into deep sleep during active client database read/write operations.
iOS Local Network Usage (NSLocalNetworkUsageDescription):
Enables iOS devices to discover and bind to local subnet IP addresses for developer testing over Wi-Fi.

        🔒 Local Network Isolation: All socket listeners are strictly bounded to user-designated local ports and are controlled entirely by you via the Start/Stop toggle.
      

4

Data Storage, Retention & Deletion Rights (GDPR & CCPA)

All SQLite database files (pb_data), user records, admin credentials, uploaded attachments, and logs are stored exclusively in your device's private, encrypted, sandboxed app directory.

Your Deletion & Export Rights:

Instance Deletion: You can permanently delete any server instance and its entire SQLite database folder (pb_data) with one tap using the in-app Delete button.
Complete App Wipe: You can instantly purge all databases and app configurations by clearing App Storage in your Android/iOS System Settings or by uninstalling the application.
No Cloud Retention: Because no data is ever transmitted to ShanApps servers, there is no remote data to request deletion for.

5

Open Source Attribution & Third-Party Software

PB Server embeds and orchestrates the official open-source PocketBase server engine (https://pocketbase.io), created by Gani Georgiev and licensed under the permissive MIT License.

PB Server is an independent application created by ShanApps. It communicates with PocketBase strictly via standard local OS process execution and local loopback API protocols.

6

Children's Online Privacy (COPPA & GDPR-K)

PB Server does not collect, request, or process personal data from any person, including children under 13 (or under 16 in the European Union). The app complies fully with COPPA, GDPR, and the Google Play Families Policy.

7

Changes to This Privacy Policy

We may update our Privacy Policy periodically. Any revisions will be published directly on this page (https://pbserver.shanapps.dev/privacy) with an updated "Effective Date". We encourage you to review this page occasionally.

8

Contact Us & Official Support

If you have any questions, concerns, or requests regarding this Privacy Policy or your data privacy, please contact the developer team directly:

📧 pbserver.admin@shanapps.dev 💬 Telegram Community 📱 WhatsApp Support