Privacy policy

Last updated: September 2, 2026

Phammad runs no server of its own: your device talks directly to your own self-hosted Zammad instance. LaCobble (contact@lacobble.dev) publishes the app but never sees your support data.

1. No Phammad server

Phammad has no database or backend. Every request goes directly from your device to the Zammad instance URL you provided.

2. Token storage

Your personal API token is encrypted and kept in the iOS Keychain, protected by the operating system. It is never sent to LaCobble or any third party.

3. Your instance's data

Tickets, profiles, and any other data shown come exclusively from your Zammad instance and remain subject to its own privacy and retention policy.

4. No advertising profile

Phammad does not sell data and does not embed any third-party advertising SDK.

5. Showcase site

This site may use Google Analytics, only if you allow it via the cookie banner.

6. Data deletion

Deleting the app removes the locally stored token. Your data remains managed by your Zammad instance, independent of Phammad.

7. Contact

For any privacy question: phammad@lacobble.dev