Skip to main content
Trust & Transparency

Privacy Policy

Last updated: October 2026

Overview

podctl is developed and distributed by Olib AI ("we", "our", or "us"). We recognize that Kubernetes clusters contain sensitive corporate workloads, API secrets, and infrastructure configurations. Our core principle is simple: your cluster data belongs entirely to you. podctl is engineered as a local-first client with zero-knowledge architecture.

Local Credential Security

All sensitive credentials, including kubeconfig contexts, authentication tokens, client certificates, private keys, and SSH tunnel configurations, are stored exclusively on your device.

  • Keychain Integration: Tokens and certificates are saved within Apple's hardware-backed Keychain.
  • Sandboxed Storage: Application data is isolated within the macOS, iOS, iPadOS, and visionOS secure sandboxes.
  • No Cloud Relay: We never transmit, sync, or backup your kubeconfigs to our servers or third-party cloud databases.

Direct Cluster Communications

When you connect podctl to a Kubernetes cluster (such as Amazon EKS, Google GKE, Microsoft AKS, or a local k3s cluster), the app initiates direct connections from your device to the cluster API endpoint over HTTPS and mutual TLS (mTLS). We do not operate proxy servers or intermediate gateways. Your cluster traffic remains strictly between your device and your cloud provider.

On-Device Intelligence & Diagnostics

podctl features on-device AI tools to explain Kubernetes errors, diagnose CrashLoopBackOff states, and recommend resource adjustments. These machine learning models run locally on Apple silicon whenever supported. At no point are your cluster logs, pod manifests, or error traces sent to external AI providers or remote language model APIs.

Information We Collect

To maintain software quality and diagnose platform-level crashes, minimal non-identifying technical data may be processed:

  • Crash Reports: If you opt in to Apple's diagnostic sharing, anonymized crash reports containing stack traces and OS build numbers are made available through App Store Connect.
  • Anonymous Usage Metrics: Aggregated feature activation counts may be collected to help us prioritize new tool development. You can disable telemetry entirely in podctl preferences.

Data Retention and Deletion

Because all operational data is stored locally on your Apple device, you retain complete authority over your data. Removing the app or clearing the local cache immediately and permanently purges all stored cluster configurations.

Contact and Inquiries

If you have questions, feedback, or concerns regarding our privacy practices, please contact Olib AI:

Olib AI Privacy Team
Email: privacy@olib.ai
Address: Stone Mountain, GA, United States
Website: https://olib.ai