Privacy Policy

Effective Date: July 15, 2026

This Privacy Policy describes how K8sScout ("the App", "we", "our") handles information when you use the App. The App is a Kubernetes cluster management tool that runs on your device.

1. Data Collection and Storage

1.1 Kubeconfig Credentials

When you connect to a Kubernetes cluster, the App stores your kubeconfig file (which may contain cluster endpoint addresses, authentication tokens, client certificates, and keys) in the platform's encrypted storage:

• Android: EncryptedSharedPreferences (AES-256)
• iOS: Keychain
• Windows: DPAPI

These credentials never leave your device through the App and are only used to establish authenticated connections to your own Kubernetes clusters.

1.2 Connection Bookmarks

When you save a cluster connection as a bookmark, the App stores the bookmark name and a generated identifier in local app preferences. The associated kubeconfig data is stored in the encrypted storage described above.

1.3 Audit Log

The App maintains a local audit log of actions you perform on your clusters (such as deleting, scaling, or restarting resources). This log is stored in a file on your device and records:

• Cluster name
• Resource kind and name
• Namespace
• Action performed (e.g., "delete", "scale", "restart")
• Timestamp
• Whether the operation succeeded

This audit log is strictly local — it is never transmitted off your device by the App.

1.4 App Preferences

The App stores your theme preference (light/dark mode) and disclaimer acceptance status locally on your device. No personal identifiers are associated with these preferences.

2. Network Communication

2.1 Kubernetes API Servers

The App communicates directly with the Kubernetes API servers of the clusters you configure. All data transmitted (pod logs, resource manifests, exec sessions) travels between your device and your cluster's API endpoint over TLS-encrypted connections. The App does not route traffic through any intermediary servers.

2.2 Microsoft Azure (Optional — AKS Login Flow)

If you choose to connect to an Azure Kubernetes Service (AKS) cluster using the Azure login flow, the App communicates with:

• Microsoft Identity Platform (login.microsoftonline.com) — for authentication using your Azure AD account
• Azure Resource Manager API (management.azure.com) — to list your Azure subscriptions, AKS clusters, and retrieve cluster credentials

These interactions use the Microsoft Authentication Library (MSAL). Access tokens and account information are held in memory only and are not persisted to storage.

3. Third-Party Services

3.1 Sentry Error Reporting

The App uses Sentry (sentry.io) for crash and error reporting to help improve stability. Sentry may automatically collect:

• Stack traces and error messages from crashes
• Device model, operating system version, and app version
• Performance trace data (page load times, network request durations)

Sentry does not receive your kubeconfig credentials, cluster data, or audit logs. Error reports may incidentally include resource names or cluster metadata if they appear in an error message. You can review Sentry's privacy policy at https://sentry.io/privacy/.

4. Data You Share with Your Clusters

When you use the App to view logs, execute commands in pods, or inspect Kubernetes resources, that data is transmitted directly to and from your own Kubernetes clusters. The App does not have access to, nor does it collect, the contents of your cluster workloads beyond what is necessary to display them to you on your device.

5. Data Retention and Deletion

• Kubeconfig credentials: Stored until you remove the bookmark or uninstall the App. Uninstalling the App removes all locally stored data.
• Audit log: Limited to a maximum of 10,000 entries; older entries are automatically trimmed.
• App preferences: Stored locally until you clear app data or uninstall the App.

6. Data Sharing

We do not sell, rent, share, or disclose your data to any third parties. Specifically:

• Kubeconfig credentials and cluster data are never transmitted outside the App except directly to your own Kubernetes API servers.
• Azure authentication tokens are exchanged exclusively with Microsoft's identity platform.
• Sentry error data is processed by Sentry (Functional Software, Inc.) under their data processing terms.

7. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected with an updated effective date. We encourage you to review this policy periodically.

9. Contact

If you have questions about this Privacy Policy, please contact us at:

Email: info@gyrussolutions.com