xbin Try it free

Privacy

Last updated 26 September 2026

xbin is software you run yourself. Your workspace, its apps, files, agents and accounts live on your server. The xbin project does not run your workspace and cannot see into it. The one service the project runs for you is the relay that delivers push notifications to the xbin app, and only when you turn notifications on.

The xbin server

  • xbind runs on hardware you or your organisation control. What it stores stays there, under the control of whoever operates it.
  • It sends no telemetry, analytics or usage reports anywhere.
  • Installing and updating it download files from xbin.dev, GitHub and the upstream projects it builds on, such as the Go toolchain and Alpine Linux. Those sites' own policies cover those downloads.
  • For questions about your data in a workspace, ask its administrator. They control its accounts, audit log and backups.

The xbin app for iPhone and iPad

  • The app connects to the workspaces you add. Your sign-in key is made in your device's Secure Enclave and never leaves it.
  • It contains no analytics, advertising or tracking, and no third-party code that collects data.
  • Every few hours it downloads https://xbin.dev/app/ios.json, a static file that can switch off native tile views if an app version has a problem. The request carries no identifier.

Push notifications

Notifications are optional and off until you allow them for a workspace. Apple delivers notifications to an app only from its developer, so they pass through a relay run by the xbin project.

  • When you turn them on, the app registers its Apple push token with the relay and receives a random handle for each workspace. Your workspace stores that handle.
  • The relay stores the push token, the handles, the random id of the workspace allowed to use each handle, and when each was last used. It stores no names, addresses, accounts or workspace URLs.
  • Your workspace encrypts every notification so that only your device can read it. Its key never leaves the device. The relay and Apple cannot read notifications.
  • Live Activities, the agent status card on your lock screen, cannot be encrypted. Their updates carry only whether an agent is working, waiting for you or done, since when, and how many requests wait. They never carry a name or any text.
  • The relay sees your device's IP address when the app registers. It uses the address only to limit request rates and does not store it.
  • Removing a workspace from the app deletes its handle. The relay deletes everything for a push token when Apple reports the token is no longer valid, and deletes handles unused for 180 days.

This website

xbin.dev is a set of static pages. It sets no cookies, runs no analytics and loads nothing from other sites. Its hosting provider may keep standard access logs.

Changes and contact

Changes to this page are published here and in the project's history on GitHub. Questions: github.com/xbin-dev/xbin/issues.