RespireCloud
Request a demo

Phone app privacy

The RespireCloud app connects your phone to RespireCloud servers that you, your company or your hosting provider run. It has no account of its own, no advertising and no analytics, and it sends nothing to RespireSoft.

What stays on your phone

  • The servers you add: their address, their name and the user name you signed in with.
  • Your sign-in for each server, kept in the phone's secure storage (Android Keystore, iPhone Keychain).
  • If you connect a server for notifications: a key made on the phone for that server. Its private half never leaves the phone.
  • If you connect a mailbox from a link: its server names and the password made for this phone, in secure storage.
  • Your choices: the app lock and which servers may send you notifications.

What goes to your servers, and only to them

  • Your sign-in. It happens in your phone's browser on your server's own page, so the app never sees your password.
  • The phone's model name, its system (Android or iPhone) and the app version, so you can recognise the phone in the panel's list of phones.
  • For notifications: the public half of the phone's key and your on or off choice. Your server then sends its notifications straight to the phone over its own connection. No Firebase, no Apple push service and no RespireSoft relay is in between.

After you sign in, the app shows your server's own web panel. What the panel keeps is up to whoever runs that server; the RespireCloud software itself is described in our privacy notice.

What goes to RespireSoft

Nothing from the apps in the App Store and Google Play. The app you download from our website asks respirecloud.com/download/latest.json whether a newer version exists; that request carries no personal data, and our web server keeps its standard access log (address, time, file).

The QR code scanner

Codes are read on the phone by Google's ML Kit, which is built into the app; the camera picture never leaves the phone. ML Kit sends Google diagnostic data about the scanner (phone model, system version, the app's name and version, an identifier for this installation, and performance and error figures). Google describes it on ML Kit's data disclosure page. You can always type the server address instead of scanning.

Permissions

  • Camera, only while you scan a code, and asked the first time you tap Scan QR code.
  • Notifications, asked when you connect a server for notifications.
  • A connection that stays open (Android): while notifications are on, the app keeps one connection to each of those servers and shows a quiet "Connected to" notification, as Android requires. It starts again after the phone restarts.
  • Fingerprint or face, for the app lock. The phone checks it; the app only learns whether it matched.

Removing your data

  • Remove a server in the app: the phone is signed out of it, and its sign-in and keys are deleted from the phone.
  • Uninstalling the app deletes everything it kept. The app is never backed up to the cloud.
  • Your account on a server belongs to that server: how to delete it.

Children

The app is a tool for running servers and is not meant for children.

Contact

Respiresoft LLC, 32 N Gould St, Sheridan, WY 82801, United States. info@respiresoft.com. Last changed 28 October 2026.