Privacy Policy

Effective: September 9, 2026

This Privacy Policy explains how the Grafium application for iPhone (“Grafium”, “the App”) handles information. It is written by the App’s sole developer, who operates no servers and receives no data from the App.

1. Summary

Grafium collects no data. It has no accounts, no backend, no analytics, no advertising and no third-party SDKs of any kind. Everything you enter stays on your iPhone, and every request the App makes goes directly from your device to a server you chose. This corresponds to the Data Not Collected declaration on the App Store product page.

2. What Grafium stores on your device

All of the following is written only to your iPhone, inside the App’s own storage:

• Connection details — the address of each Grafana server you add and the name you give it.
• Credentials — the API token, password, or JWT you enter is stored in the iOS Keychain, never in a file, a log or the App’s settings. Revealing a saved credential in the interface requires Face ID, Touch ID, or your device passcode.
• Session cookie — if you sign in through your organisation’s SSO page, the resulting Grafana session cookie is kept the same way, for that server only.
• Preferences — which dashboards you pinned, which you opened recently, and per-dashboard settings such as the time range, all in the App’s own preferences.
• A cache of dashboard structure — the layout returned by your server, so a dashboard you revisit opens without waiting. It holds no credentials.

None of this is transmitted anywhere, because there is nowhere for it to go: Grafium has no server of its own and the developer has no access to your device.

3. What leaves your device, and where it goes

Grafium makes network requests in exactly four situations:

• To your own Grafana servers. Read-only API requests, carrying the credential you configured for that server. This traffic is between you and infrastructure you control; it does not pass through the developer.
• To Grafana Labs’ public demo server (play.grafana.org), and only if you tap Try Demo. The connection is anonymous and carries no credential.
• To a news feed, and only when a dashboard you open contains a Grafana “news” panel. The App fetches the address that panel specifies — by default grafana.com/blog/news.xml — using a separate session that sends no credential and accepts no cookies.
• To images and links your dashboards reference. A text panel may embed an image or a link; the image is fetched without a credential, and tapping a link opens it in Safari, outside the App.

Requests made on your behalf reach the operators of those servers, who apply their own privacy practices. For play.grafana.org and the default news feed that is Grafana Labs.

4. What Grafium does not do

• No analytics, telemetry, crash reporting or usage statistics.
• No tracking, no advertising identifiers, no data brokers. Nothing is shared with anyone for any purpose.
• No third-party SDKs — the App is built entirely on Apple’s own frameworks.
• No account, no sign-up, no email address required.
• No writes to your Grafana. The App issues read requests only.

5. Retention and deletion

Because nothing is collected, there is nothing held remotely to retain or delete. On your device, data lives as long as you keep it:

• Deleting a server in Settings removes its details and erases its credential from the Keychain.
• Settings ▸ Clear Cache discards the stored dashboard structure.
• Deleting the App removes everything it stored, including Keychain items.

6. Security

Credentials are held in the iOS Keychain, which is encrypted by the system and protected by your device passcode; revealing one in the interface requires biometric or passcode authentication. Connections use HTTPS with the system’s standard certificate validation. Grafium is only ever as private as the servers you point it at — how your Grafana instance handles its data is governed by whoever operates it.

7. Children

Grafium is a tool for people who administer or monitor computer systems. It is not directed to children, and because it collects no data it collects none from children.

8. Your rights

Privacy laws such as the GDPR, the UK GDPR and the CCPA give you rights to access, correct, export or delete personal data a company holds about you, and to know whether it is sold or shared. Grafium holds no personal data about you, sells nothing and shares nothing, so there is no record for such a request to reach. Your data stays under your control on your own device. You are welcome to write with any question about this at the address below.

9. Changes to this policy

This policy may be updated as the App changes. Revisions are posted on this page with a new effective date; the date above always reflects the current version.

10. Contact

Questions about this policy or about the App:
grafium_help@icloud.com