Legal
Privacy Policy
KubePilot
- Effective Date
- April 5, 2026
- Developer
- Muhammad Imran Faruqi
- Contact
- [email protected]
1. Overview
KubePilot is a Kubernetes API client that connects directly from your device to the Kubernetes clusters you configure. The app does not route your cluster traffic through our servers, does not require an online account, and does not collect cluster data, resource contents, or credentials on our behalf. All sensitive connection information is stored in your device's secure storage.
2. Data We Collect
2.1 Data Stored Locally on Your Device
| Data | Purpose | |
|---|---|---|
| Kubeconfig files, cluster connection endpoints, certificates, and authentication tokens | Establish and maintain authenticated connections to your Kubernetes clusters | Device secure storage (platform keychain / Keystore / Secure Enclave) |
| Cached Kubernetes resource data — namespaces, pods, deployments, services, secrets metadata, and other resource states | Display resource listings and support offline browsing of recently viewed resources | Local app database (Hive) |
| User preferences, cluster aliases, namespace selections, sidebar state, and app settings | Restore your workspace layout, active cluster context, and display preferences across sessions | Local app preferences |
2.2 Data Transmitted to Your Server
KubePilot sends network traffic only between your device and the systems you have explicitly configured. When you use the app, the following transmissions occur:
- Kubernetes API requests sent directly from your device to the Kubernetes API server of each cluster you have added — KubePilot does not proxy, log, or intercept this traffic
- Helm chart repository and OCI registry requests sent to the repository URLs you have configured, when you browse or fetch chart data
- WebSocket connections to the Kubernetes watch API for real-time resource updates — these connections go directly to your cluster
- Optional Helm binary subprocess calls on desktop platforms, communicating with local chart data and configured repositories only
2.3 Data We Do NOT Collect
- KubePilot does not send cluster data, resource contents, Kubernetes secrets, or credentials to our servers at any point.
- We do not run analytics, crash reporting, or behavioural tracking SDKs in the app.
- We do not require you to create an online account to use any feature of the app.
- We do not access your contacts, location, photos, or any device data unrelated to cluster management.
- We do not store or transmit the contents of Kubernetes Secrets — secret values are displayed in-app for the authenticated user only.
3. Third-Party Services
The app connects only to Kubernetes API servers, Helm chart repositories, OCI registries, and FluxCD sources that you explicitly configure. Their respective privacy policies govern those connections.
If you use OIDC or cloud-provider SSO authentication, your identity provider's privacy policy governs those authentication flows.
No third-party analytics, advertising, or data-collection SDKs are included in KubePilot.
On desktop platforms, the optional Helm binary integration runs locally on your device and does not involve any third-party network calls beyond what the Helm CLI itself initiates.
4. Biometric Data
If the platform supports biometric app lock, KubePilot uses OS-provided biometric APIs such as Face ID, Touch ID, or fingerprint authentication. The app never receives, stores, or transmits biometric templates or raw biometric data.
5. Data Security
- Cluster credentials and kubeconfig data are stored in your device's platform-provided secure storage — iOS Keychain, Android Keystore, or the equivalent on desktop.
- All traffic between KubePilot and your Kubernetes clusters uses the TLS configuration you have provided in your kubeconfig.
- You can remove all locally stored app data by uninstalling the app or clearing app storage through your device settings.
6. Data Retention and Deletion
- Cached resource data and connection settings remain on your device until you remove the cluster from the app, clear app storage, or uninstall the app.
- KubePilot does not retain copies of your cluster data on any remote server — no retention period applies beyond what is on your device.
- When you remove a cluster connection from the app, associated credentials and cached data for that cluster are deleted.
7. Children's Privacy
KubePilot is a developer tool targeting professional and technical users. It is not directed to children under 13, and we do not knowingly collect personal information from children.
8. Your Rights
Because KubePilot stores all data locally on your device, you are in direct control of everything the app holds.
- View and manage all stored cluster connections directly in the app's Settings.
- Remove individual clusters and their associated cached data from within the app.
- Clear all locally stored app data at any time through your device settings or by uninstalling the app.
- Contact us at [email protected] with any privacy questions or requests.
9. Changes to This Policy
We may update this Privacy Policy as the app evolves or legal requirements change. Updated versions will be published on this page with a revised effective date.
10. Contact
Privacy questions or requests can be sent to [email protected]