Rendered from the app repository at commit c891c87 (2026-11-15). The copy in the app (Settings → About) is the same text.

UltraPlus Ops Privacy Policy

Draft for the free beta. Not legal advice; to be reviewed before paid plans launch. It describes the app as built today; update it in the same change as any new network call.

Version: beta-1, 2026-11-15. Controller: Mahammad Jafar, [email protected].

The short version

UltraPlus Ops is local-first. It sends us nothing: no telemetry, no analytics, no crash reports, no account. Your hosts, credentials, logs and files stay on your device or go only to the systems you connect to.

What stays on your device

• Saved hosts, groups, snippets, settings, port forwards and cluster favourites: a local database in your user profile (dev.keel.work application data folder), readable only by your user account.
• Passwords, passphrases and tokens: your operating system’s keyring (Secret Service on Linux, Credential Manager on Windows), never in the database or in plain files.
• SSH host keys you trust: the local database.
• Command history: stored locally; values that look like secrets (tokens, passwords in common command forms) are masked before they are saved. Masking is best effort.
• Session recordings: saved only when you start a recording, to a local folder.
• Performance diagnostics: measured and shown locally under Settings → Privacy; never sent anywhere.

What the app connects to, and only when you ask

• Servers you connect to over SSH and SFTP, with the credentials you choose.
• Kubernetes clusters in your kubeconfig, with your own RBAC permissions.
• Amazon Web Services (S3, EC2, EKS, SSM, STS and SSO sign-in) through your own AWS profiles and permissions.
• Port-forward destinations you configure.

These connections go directly from your device to those systems. They do not pass through us, and we cannot see them.

What we receive

Without a Pro licence key: nothing.

With a Pro licence key, when device activation is switched on (it is announced in the release notes of the version that turns it on), the app contacts our licence service (licence.ultraplusops.com) when you activate, about once a week to renew, and when you remove the licence from a device. It sends only:

• your licence key;
• a random device id that this installation made up (not your hardware, hostname or username);
• the device name you typed, for example “Work laptop”;
• the app version.

The service stores the licence id, device id, device name and the dates each device was first and last seen, so it can allow up to 3 devices per licence. It does not store IP addresses (our hosting provider, Cloudflare, processes them to deliver the request). A device not seen for 60 days is no longer counted. Nothing about your hosts, clusters, files, commands or usage is ever sent.

If we add update checks, they will send only the app version and platform; this policy will be updated before they ship.

Our website and payments

The website (ultraplusops.com) is covered by its own notice. If we sell paid plans, a payment provider acting as the seller (merchant of record) will process your name, email, address and payment details under its own privacy policy; we receive your email, country and order details to issue and support your licence.

Your choices and rights

You can delete all local data by uninstalling the app and removing its application data folder, and remove saved secrets from your OS keyring. For anything we hold about you (only if you have bought a licence or emailed us), write to [email protected] to access, correct or delete it.

Changes

We will update this page and its version when the app’s data flows change.