Privacy Policy
OpsMux handles production infrastructure, so it holds unusually sensitive material: SSH keys, database passwords and API tokens. This policy explains exactly what we store, what stays on your device, and what we can never read.
Last updated 19 August 2026
OpsMux ("the app") is a server and infrastructure management app published by Digiqulus. This policy explains what personal data the app and its backend collect, why, and the choices you have. Questions go to contact@digiqulus.com.
The short version
- We store the minimum needed to run your account and sync your setup between devices.
- Credentials you protect with the zero-knowledge vault are encrypted on your device with a passphrase we never receive — we cannot read them, and cannot recover them if you lose the passphrase.
- We never sell your data, and we don't use it for advertising.
- Payment card details never reach us; Apple, Google and our billing processor handle them.
Information we collect
Account information
When you sign in with Google, GitHub, Microsoft or Apple, we receive and store your email address, display name and profile photo URL from that provider, along with your app version and a push-notification token. We never receive your password for those services. If you sign in with Apple and use its private-relay email, we only ever see the relay address.
Infrastructure and connection data
To provide the service, the app stores the server, database and tool connections you create — hostnames, ports, usernames, aliases, tags and connection history — plus the credentials needed to reach them:
- SSH passwords and private keys
- Database connection passwords
- Tool credentials for integrations such as Jenkins, Argo CD, GitHub, AWS and Grafana
Two-factor (TOTP) secrets in the Authenticator tool never leave your device. They are held in the device's secure storage and are not synced to our servers.
How credentials are protected
Credentials are stored in your device's platform secure storage (Keychain on iOS/macOS, Keystore-backed storage on Android). If you enable the encrypted cloud vault, they are additionally encrypted on your device with a key derived from your vault passphrase before being sent to our servers. We store only the resulting ciphertext. Because the passphrase is never transmitted, we cannot decrypt that data, and neither can anyone who obtains a copy of our database. The trade-off is that a forgotten passphrase cannot be reset by us.
AI assistant
When you use AI features, the text of your request — which may include command output, log excerpts or system details you choose to send — is transmitted to the AI provider you have selected (for example OpenAI, Anthropic or Google) to generate a response. If you configure your own API key, requests go directly from the app to that provider under your own account. If you use the OpsMux-provided key, requests pass through our backend, and we retain the request and response to enforce usage limits, debug failures and prevent abuse. Please avoid pasting secrets into AI prompts.
Monitoring and alerts
If you enable health checks, alert rules or metric collection, we store the resulting alert rules, alert events and metric samples (such as CPU, memory and latency readings) associated with your account so the features work across devices and over time.
Subscriptions and payments
Pro subscriptions are sold through the Apple App Store and Google Play and managed with RevenueCat. Those providers act as the merchant and process your payment; we never receive your card number or billing address. We store your subscription status, plan, store of purchase, renewal date and the transaction identifiers needed to keep your entitlement accurate.
Diagnostics and product feedback
We store bug reports, feature requests and feedback you submit, along with the app version they came from. We also record when an in-app announcement was shown to you and whether it was tapped, so we can tell whether announcements are useful. We use Firebase for authentication and push notifications, which processes device and messaging identifiers on our behalf.
How we use information
- To authenticate you and keep your account and settings in sync across devices
- To provide the features you use — connections, monitoring, alerts, tools and AI assistance
- To send notifications you have enabled, such as alert and health-check notifications
- To operate subscriptions and apply the correct plan limits
- To diagnose faults, prevent abuse and improve the product
We do not sell your personal information or use it for advertising profiling.
Sharing
We share data only with service providers that make the app work:
| Provider | Purpose |
|---|---|
| Google Firebase | Sign-in and push notifications |
| Apple / Google / RevenueCat | Subscription purchases and status |
| AI providers you select | Generating AI responses |
| Our hosting provider | Running the OpsMux backend |
We may also disclose information where legally required, or to protect the rights and safety of our users and our service.
Note that when you connect to your own servers, databases or third-party tools through the app, that traffic goes directly to the systems you configure and is governed by their own policies.
Retention
We keep account and connection data for as long as your account is active. Delete a connection or credential in the app and it is removed from our systems. Metric samples and alert events are retained only as long as needed for the history the app displays. When you delete your account, we delete the personal data associated with it, except where we must retain records to meet legal, tax or accounting obligations.
Security
Traffic between the app and our backend is encrypted in transit. Credentials are held in platform secure storage on the device and, with the vault enabled, are end-to-end encrypted so they are unreadable to us. The app also supports biometric app lock and blocks screenshots and screen recording of sensitive screens by default. No system is perfectly secure, and we cannot guarantee absolute security, but we design so that the most sensitive material is not ours to lose.
Your choices and rights
- Access and export — request a copy of the personal data we hold about you.
- Correction — update your name and photo in the app at any time.
- Deletion — delete individual connections and credentials in the app, or close your account entirely on the delete your account page. Account deletion is permanent and cannot be undone.
- Notifications — turn push notifications off in app settings or in your device settings.
- AI — use your own API key so requests never pass through our servers, or avoid AI features entirely.
Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to processing or to lodge a complaint with your local data protection authority.
Children
OpsMux is a professional tool and is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect data from them.
International transfers
We and our service providers may process data in countries other than your own. Where that happens, we rely on appropriate safeguards for the transfer.
Changes to this policy
We may update this policy as the product evolves. Material changes will be announced in the app or by email, and the "last updated" date above always reflects the current version.
Contact
Questions, requests or complaints about this policy or your data can be sent to contact@digiqulus.com.