Privacy Policy

Last updated: April 30, 2026

Runabout Digital ("we", "our", or "us") built Konsol as a commercial application. This Privacy Policy explains how we collect, use, and protect your information when you use Konsol on iOS, iPadOS, macOS, or Android.

Information We Collect

Konsol is designed to keep your data on your device. The following are stored locally:

• Connection profiles (hostnames, IP addresses, ports, usernames) — stored locally on your device.
• Passwords and SSH keys — stored in the platform's secure credential store (iOS/macOS Keychain, Android EncryptedSharedPreferences/Keystore).
• Macros, quick buttons, snippets, notes, manual devices, MAC and IP reference data — stored locally on your device.
• Session recordings, terminal scrollback, configuration backups, log files — stored locally on your device.
• Theme, font, and tool layout preferences — stored locally on your device.

Optional Sync — Two Independent Systems

1. Apple iCloud Sync (iOS, iPadOS, macOS only)

If you enable iCloud sync on Apple platforms, profile data and lightweight settings (theme, layout) sync between your Apple devices via Apple's iCloud Key-Value Store and iCloud Keychain. This sync is operated entirely by Apple under Apple's privacy policy. We have no access to your iCloud account or its contents.

2. Konsol Cloud Sync (Optional, all platforms)

Konsol offers an optional Cloud Sync feature that keeps your profiles, macros, and saved credentials in sync across iOS, macOS, and Android. It is opt-in — disabled by default — and you control the encryption key. Specifically:

• What is uploaded: connection profiles (hostnames, ports, usernames, configuration), saved SSH passwords and private keys, saved Telnet/serial credentials, macros, quick buttons and templates, manual device entries, network notes, MAC and IP reference data, code snippets, and theme/font/tool layout preferences.
• How it is protected: all data is encrypted on your device with AES-256 before it leaves the app. The encryption key is derived from a sync password that you choose and control. We do not store, transmit, or have access to your sync password in any form.
• What we cannot do: because we do not hold the key, we cannot decrypt your Cloud Sync data — neither for ourselves, nor for law enforcement, nor for anyone else with access to the storage. We have only opaque ciphertext.
• Where it is stored: the encrypted backup is stored on cloud infrastructure operated on our behalf by Cloudflare, Inc. (Cloudflare R2 object storage and Cloudflare Workers). Cloudflare cannot read your data for the same reason we cannot.
• What is NOT uploaded: session terminal output, command history, screen recordings, log files, configuration backups pulled via Config Manager, or any data you transmit over an active SSH/Telnet/Serial/SFTP connection.
• Disabling and deleting: you can turn off Cloud Sync at any time in Settings → Sync → Disable & Delete Cloud Copy. This deletes the encrypted backup from our cloud storage immediately. Your local data on the device is unaffected.
• Retention: the encrypted backup is retained as long as Cloud Sync is enabled on at least one of your devices. If a backup goes untouched for 365 days, it is automatically purged by storage lifecycle rules.
• If you forget your sync password: your encrypted backup becomes permanently unrecoverable — by design.

Network Connections

Konsol connects directly to the devices and services you specify (via SSH, Telnet, serial, or SFTP). Those connections are made device-to-device — your terminal traffic does not pass through our servers.

The only network destinations Konsol contacts on its own are:

• Konsol Cloud Sync (if enabled): uploads/downloads encrypted blobs to/from our Cloudflare Worker endpoint (konsol-sync.workers.dev or successor domain).
• Apple StoreKit: subscription verification on iOS/macOS.
• Google Play Billing (Android): subscription verification on Android.
• iCloud Key-Value Store (Apple platforms): if you enable iCloud sync — handled by the OS.
• Speed Test: downloads test data from Cloudflare's public speed test servers (speed.cloudflare.com) when you manually run a speed test.
• Apple Push Notification service / Firebase Cloud Messaging: for uptime monitoring alerts, if you enable them.

Analytics, Tracking, and Advertising

We do not use any analytics, tracking, or advertising SDKs. No usage data, crash reports, or behavioral data is collected or transmitted. We do not use Google Analytics, Firebase Analytics, Mixpanel, Amplitude, Sentry, or any similar service.

We do not track you across other apps or websites. Konsol does not display the iOS App Tracking Transparency prompt because it has nothing to track.

Third-Party Services

Konsol integrates with the following services:

• Apple StoreKit, iCloud, Keychain, Push Notifications — subscription processing, optional sync, secure credential storage, and notifications on Apple platforms. Governed by Apple's privacy policy.
• Google Play Billing, Firebase Cloud Messaging — subscription processing and notifications on Android. Governed by Google's privacy policy.
• Cloudflare R2 + Workers — encrypted backup storage for Cloud Sync (only if you opt in). Cloudflare hosts opaque ciphertext on our behalf and cannot read it. Governed by Cloudflare's privacy policy.
• Cloudflare Speed Test — public speed test endpoint (speed.cloudflare.com) used only when you manually run a speed test.
• Anthropic Claude (optional, AI Command Helper) — if you use the AI Command Helper to ask questions, your typed prompt is sent to Anthropic's API. We do not transmit your terminal output or session data unless you explicitly include it in your prompt. Governed by Anthropic's privacy policy.

Data Security

• All passwords and SSH keys are stored in the platform's hardware-backed secure credential store (iOS/macOS Keychain, Android Keystore).
• SSH connections use industry-standard encryption (AES, ChaCha20, Curve25519, etc.) negotiated by libssh2.
• Cloud Sync data is encrypted with AES-256 on your device before leaving the app. The encryption key is derived from your password using PBKDF2 with a per-blob random salt.
• HTTPS / TLS 1.3 is used for all outbound connections initiated by the app.
• Optional Face ID / Touch ID / biometric lock for app access on all supported platforms.

Children's Privacy

Konsol is a professional tool not directed at children under 13. We do not knowingly collect information from children.

Data Retention

• Local data: stored on your device until you delete it (in-app or by uninstalling Konsol). Deleting the app removes all local data.
• iCloud data: managed by Apple; you control retention through iOS/macOS Settings → Apple ID → iCloud.
• Cloud Sync data: retained while Cloud Sync is enabled on at least one device. Removed immediately when you tap "Disable & Delete Cloud Copy" in Settings → Sync. Auto-purged after 365 days of inactivity by storage lifecycle policy.

Your Rights

For local and Cloud Sync data, you have full control through the app itself: enable, disable, export, and delete are all reachable from in-app Settings without contacting us.

For data subject requests (GDPR, CCPA, or similar), note that because Cloud Sync data is end-to-end encrypted and not linked to any identifying account on our side, we have no practical way to identify which encrypted blob belongs to which natural person. We can only confirm that the in-app delete action permanently removes your data. For all other privacy questions, contact us through the support form.

International Users

Konsol is operated from the United States. By using Konsol you consent to your data being stored and processed in the United States and on Cloudflare's global edge network. Where applicable laws require, your data is transferred under standard contractual safeguards.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of Konsol after changes take effect constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us through our contact form.