Manage Synology Dockers in Your Hands!
Effective date: August 20, 2026
This Privacy Policy describes how SynoDocker (“the app”, “we”, “us”) handles information when you use the iPhone app SynoDocker.
SynoDocker lets you sign in to a Synology NAS (DSM) from your iPhone and view or manage containers in Container Manager. We do not operate a SynoDocker cloud account or a backend that stores your NAS credentials or container data.
If you do not agree with this policy, please do not use the app.
SynoDocker is published under the bundle identifier com.geekast.SynoDocker.
To ask a privacy question, use Contact Us in the app (About).
When you sign in, you enter:
This information is used only to authenticate with your DSM and to call Container Manager APIs. The password and OTP code are sent to the NAS as part of the sign-in request. We do not store the password or OTP on the device or on any SynoDocker server.
After a successful sign-in, DSM returns a session identifier (and, when provided, a Synology token). Those values are used for later API calls until you sign out or the session expires.
While you use the app, your iPhone may receive from the NAS:
This data is shown on your device so you can manage containers. It is not uploaded to us.
| Stored locally | Purpose | Where |
|---|---|---|
| Session (NAS address, account name, DSM session id / token) | Optional “Remember sign-in” so you do not have to type everything on the next launch | iOS Keychain, this device only |
| Auto-refresh on/off and refresh interval | Settings you choose in the app | App preferences on this device |
Signing out clears the Keychain session. Uninstalling the app removes local app data in the usual iOS way.
Demo mode creates virtual containers only in memory. Leaving demo discards that data and restores your previous refresh settings. Demo is not written to the Keychain.
If you tap Paste on the OTP field, the app reads the clipboard once to fill the code. If you long-press to copy a log line, environment variable, IP address, or similar field, the app writes that text to the clipboard. Clipboard access is user-initiated and stays on the device.
If you use Contact Us, the system Mail composer may open with the app name and version in the subject. Whatever you write and send is an email you choose to send to us. Do not include passwords or OTP codes.
We do not collect:
On-device and NAS-bound information is used only to:
We do not use NAS credentials or container contents for advertising.
The primary recipient of sign-in and container requests is the NAS (or relay) you configure. That device is operated by you or your organization. Its own privacy and security settings (HTTPS, firewall, auto-block, DSM accounts) apply.
You can allow HTTP (unencrypted) connections to a user-entered NAS address. Use HTTP or a self-signed certificate only on networks you trust.
If you sign in with a QuickConnect ID, the app contacts Synology QuickConnect services (for example global.quickconnect.to) to resolve reachable NAS addresses, and may use a Synology relay if a direct address is not available. That traffic is governed by Synology’s terms and privacy policy, not by a SynoDocker server.
Subscriptions and the lifetime purchase are sold through the App Store using StoreKit. Apple processes payment, Apple ID, and subscription status. We receive purchase / entitlement status needed to unlock premium features (container details and control). We do not receive your full payment card number.
Apple’s privacy policy applies to App Store accounts, receipts, and subscription management.
We do not run a service that receives your DSM password, container logs, or environment variables.
Premium features (container details, logs, configuration, and start / stop / restart) require a monthly subscription, a yearly subscription, or a lifetime purchase.
We cannot remotely wipe data on your NAS. To remove NAS-side logs or accounts, use DSM.
No method of transmission or storage is perfectly secure. If you believe there is a vulnerability, contact us using the details in section 12.
SynoDocker is not directed at children under 13 (or the equivalent age in your country). We do not knowingly collect personal information from children. If you believe a child has provided information to us by email, contact us and we will delete it.
Processing happens on your iPhone, on your NAS (and, if you use QuickConnect, on Synology’s infrastructure). If you use the app while travelling, the same local-and-NAS model applies. We do not operate a SynoDocker data centre that hosts your container data.
We may update this Privacy Policy when the app or legal requirements change. The effective date at the top will be revised. Continued use after an update means you accept the revised policy. Material changes will be reflected in the documentation published with the app.
Please do not send DSM passwords, OTP codes, or Keychain exports.