KubePilot Privacy Policy

Last updated: 23 October 2026

KubePilot (“we”, “the app”) is an AI-assisted Kubernetes operations companion. This policy explains how the iOS app handles data.

In short: KubePilot does not collect data from this app. We, the developer, do not run a backend that receives your data, and the app contains no analytics, crash-reporting or advertising SDKs. Everything the app loads comes from, and goes to, the KubePilot server that you or your organisation operate.

Who processes your data

The KubePilot iOS app connects to a KubePilot server that you configure (your own host or organisation). We do not operate a mandatory cloud backend for the mobile app. Data you load in the app is sent to the server URL you enter.

Data the app handles on your behalf

The app uses the following data to do its job. It stays on your device or travels only between the app and your own KubePilot server; none of it is sent to us.

• Account credentials you enter — server URL, username/password or token. Stored in the iOS Keychain on your device; used only to authenticate to your KubePilot server.
• Cluster operations data — pod lists, events, logs, diagnostics, and AI troubleshooting results returned by your server.
• AI requests — questions you type into AI Assistant and the pod details you choose to analyse, sent only after you allow it (see AI features).
• Optional biometrics — Face ID / Touch ID only unlocks credentials already on device; biometric templates never leave the device.

We do not collect data

• KubePilot’s developers do not receive, store or have access to your credentials, cluster data, logs or AI requests.
• No usage analytics, crash reporting or other telemetry is sent to us or to anyone else.
• No advertising SDKs or third-party analytics trackers are embedded in the iOS app, and the app does not track you across other apps or websites.
• No sale of personal data.
• No Apple Advertising Identifier (IDFA).

The built-in demo account connects to our demo server (demo.kubepilot.org), which serves simulated sample data and answers AI questions with a simulated model. It is for trying the app only; it does not connect to any real cluster.

On-device storage

The app may cache recent cluster summaries locally (SwiftData) to improve offline browsing. You can remove this data by signing out or deleting the app.

AI features and AI services

KubePilot’s AI features (AI Assistant and Analyse with AI) send data to an AI model. The app asks for your permission before anything is sent, shows you what will be sent and who receives it, and AI features stay off until you tap Allow. You can withdraw permission at any time in Settings → AI & Privacy, after which the app sends nothing further to the AI model.

What data is sent

• AI Assistant: the text of the question you type, together with a summary of current cluster state generated by your server — the names and status of failing pods, deployment names and replica counts, and nodes under resource pressure.
• Analyse with AI: the selected pod’s name and namespace, status and restart history, related Kubernetes events, resource usage and requests/limits, sibling pods in the same workload, and up to the last 200 lines (about 3,000 characters) of its container logs.
• Container logs contain whatever your applications write to them and may therefore include personal data (for example email addresses or IP addresses). KubePilot does not inspect or filter log contents.

How it is sent

Neither the app nor its developers collect this data. When you use an AI feature, the app asks your KubePilot server to perform the analysis; the server reads the data above from your Kubernetes cluster and builds the request to the AI model.

Who receives it

1. Your KubePilot server — the server URL you entered in the app, operated by you or your organisation.
2. The AI model configured on that server. By default this is a self-hosted model (for example Ollama) running on the same server, in which case no data leaves your infrastructure. Your server operator may instead configure an OpenAI-compatible third-party AI service (for example OpenAI, Azure OpenAI or another hosted LLM provider). The app asks for your permission right after sign-in, before any AI feature is used. Its permission screen names your KubePilot server, the AI provider (for example OpenAI) or endpoint and the model your server reports, and states whether an outside AI company receives the data.

KubePilot’s developers do not operate an AI service for the app, do not receive your AI requests or results, and do not use them to train models.

How it is used

AI request data is used only to produce the analysis or answer you asked for — root-cause summaries, explanations and suggested remediation steps — which are returned to the app and may be stored by your server as incident reports. It is not used for advertising, tracking or profiling.

Protection by third-party AI services

Where your server operator connects a third-party AI service, that provider receives the data described above. Server operators must only connect providers that are bound by terms giving the data the same or equal protection as described in this policy — processing solely to return a response, no sale or advertising use, appropriate security, and no training on submitted data unless you have agreed to it. Data handled by such a provider is also subject to that provider’s own privacy policy.

Children

KubePilot is a developer / SRE tool and is not directed at children under 13.

Contact

Questions about this policy: support@kubepilot.org · Product site: https://kubepilot.org/