Privacy Policy

Last updated: September 22, 2026

This Privacy Policy explains how NovaScale handles information when you use the app on Apple platforms or Android. Sections about iCloud, purchases, and remote push notifications apply to the Apple edition only. The initial Android release provides Tailscale connectivity, SSH, SFTP, and an in-app browser; it does not include RevenueCat, purchases, iCloud sync, or the remote push service.

NovaScale is designed as a local-first productivity app. Most app data and activity remain on your device or travel directly between your device and the machines and services you choose. NovaScale does not sell your information, use it for advertising, or track you across apps or websites owned by other companies.

Content Not Sent to the Developer

NovaScale’s developer does not receive, inspect, or store the following content on developer-operated servers:

• SSH sessions or terminal command history
• SFTP files or file contents
• Tailnet network traffic
• Host monitoring results
• Web browsing activity
• Codex prompts, responses, code, commands, patches, transcript paths, or working directories

The app processes this content on your device to provide the features you use and communicates with the machines and services you configure. NovaScale does not route this content through a developer-operated remote proxy. Operators of the destinations you choose may process information under their own policies.

Local Storage

NovaScale stores app data locally on your device by default. This may include SSH settings, host configurations, terminal preferences, Codex connection settings, and other app preferences.

On Apple platforms, sensitive credentials, such as private keys or authentication-related data, are protected using Apple Keychain where applicable.

On Android, saved SSH passwords, private keys, passphrases, and local proxy credentials are encrypted using keys protected by Android Keystore. Tailnet identity and node state are kept in app-private storage. Settings, known-host fingerprints, and temporary SFTP previews are also stored locally. The app excludes its data from Android cloud backup and device-transfer backup and does not provide its own cloud sync.

Imported or exported files use the system file picker. Files you choose to share are passed to the app or recipient you select. Copy, paste, and terminal clipboard commands can transfer text between the terminal and your device clipboard; pasted text is sent to the selected field or remote session.

Android Browser and Local Proxy

The Android browser uses the device’s WebView component. Websites receive requests and information you submit to them and may store cookies, cached content, and website data on your device. Their operators are responsible for their own information handling, including embedded third-party content.

NovaScale runs an authenticated HTTP/SOCKS5 proxy on the device’s loopback interface. It serves the in-app browser and other apps you explicitly configure with its address and credentials. Tailnet destinations use the embedded Tailscale connection; public internet destinations may use the device’s internet connection directly. This is an on-device proxy, not a NovaScale-hosted relay or a device-wide VPN. An ordinary HTTP connection outside the tailnet is not protected by Tailscale; use HTTPS for those services.

When you enable background terminal sessions or background proxy access, NovaScale uses an Android foreground service and an ongoing notification to maintain the connections you requested. You can close sessions or stop the proxy through the app or notification controls.

Optional Remote Push Notifications (Apple Platforms)

Remote Push is an optional feature for receiving Codex status notifications when NovaScale is disconnected. It remains off until an eligible user enables it.

When enabled, NovaScale’s notification orchestration service processes:

• The Apple Push Notification service (APNs) device token and APNs environment
• An app-generated installation identifier
• Opaque notification-host, thread, event, and turn identifiers
• Notification subscription, delivery-generation, presence, heartbeat, and expiration information

This information is used only to register the device, route requested notifications, prevent stale delivery, maintain service reliability, and remove expired or disabled registrations. Remote Push does not send prompts, responses, code, commands, patches, files, transcript content, paths, or working directories to NovaScale’s notification service.

Operational records are retained only as needed to maintain active registrations and subscriptions, complete delivery and cleanup, and protect the reliability and security of the service. Registrations and subscriptions expire when they are no longer renewed. Disabling Remote Push initiates removal of the device registration and associated notification subscriptions. Apple also processes the device token and notification delivery through APNs under Apple’s privacy terms.

Tailscale Connectivity

NovaScale includes Tailscale connectivity and joins a tailnet only after you authorize it as a Tailscale client, through browser sign-in or an auth key. Upstream Tailscale remote diagnostic log uploads are disabled by default in NovaScale. This does not prevent the exchange of information needed to authenticate devices, discover peers, and maintain connections.

When you use Tailscale’s coordination service, Tailscale may process account information, such as a display name, email address, or user identifier, as well as node and device identifiers, hostnames, IP addresses, device and network information, connection metadata, and operational diagnostics needed to authenticate devices and operate the tailnet. The app receives account and peer information to display your tailnet. This processing is governed by Tailscale’s Privacy Policy. If you sign in through an external identity provider, that provider also handles your sign-in under its own policy.

If you configure another coordination server, such as a self-hosted Headscale server, that server’s operator controls its information processing and retention. NovaScale’s developer does not receive the account or device records stored by your independently operated coordination server.

In-App Purchases and Subscriptions (Apple Platforms)

NovaScale uses RevenueCat to manage in-app purchases, subscriptions, purchase validation, app entitlements, and purchase analytics. RevenueCat may process an anonymous app user identifier, purchase history, product and subscription status, transaction and entitlement information, and technical information needed to provide and secure the service.

NovaScale does not provide RevenueCat with your SSH data, terminal activity, tailnet traffic, files, browsing activity, or Codex content. RevenueCat’s processing is governed by RevenueCat’s Privacy Policy.

iCloud Sync (Apple Platforms)

If you enable iCloud sync, selected app data may be synced through Apple’s iCloud infrastructure and associated with your Apple ID. Depending on the sync options you select, this may include host settings, app preferences, and credentials protected by iCloud Keychain.

NovaScale does not operate its own server to receive or store your iCloud-synced data. Apple processes iCloud and Keychain data under Apple’s privacy terms.

Other Apple Services

NovaScale uses Apple services where needed for app functionality, including the App Store for purchases, APNs for notifications, and system-provided sharing or email interfaces when you choose to contact support or export diagnostic logs. Information you deliberately submit through those interfaces is sent only after your action and is handled by the service and recipient you select.

Diagnostic logs remain on your device unless you explicitly choose to export or share them. Please review exported information before sending it because logs may contain hostnames, addresses, or other details related to your configuration.

Third-Party Services

Depending on your platform and the features you enable, NovaScale may use Apple services, Tailscale or your selected coordination server, RevenueCat on Apple platforms, and Android system services such as WebView and Google Play distribution. Those providers and the websites or hosts you choose handle information for their respective services under their own privacy terms. Google Play and Android may separately process installation, device, or crash information according to your system settings and Google’s Privacy Policy.

The initial Android release contains no advertising, analytics, or third-party crash-reporting SDK. NovaScale does not automatically upload Android diagnostic logs to the developer. If you contact support or share logs, the recipient receives the information you choose to send; please review it for hostnames, addresses, credentials, or other sensitive details first.

NovaScale does not sell personal information, share it for targeted advertising, or use collected information to track you across other companies’ apps or websites.

Your Choices and Controls

You can:

• Keep Remote Push disabled and use local notifications instead on Apple platforms
• Disable Remote Push on Apple platforms to initiate removal of its device registration and subscriptions
• Remove hosts, keys, settings, and other locally stored app data
• Choose which categories of data, if any, are synchronized with iCloud
• Revoke NovaScale’s tailnet access through Tailscale or your selected coordination server
• Manage or cancel subscriptions through your Apple ID settings
• Stop Android background sessions or proxy access and regenerate the local proxy password
• Clear NovaScale’s storage in Android settings or uninstall it to remove its app-private data

Retention and Deletion

Local settings and saved credentials remain until you remove them or clear the app’s data; temporary caches may be cleared earlier. On Android, open Settings → Apps → NovaScale → Storage → Clear storage (wording may vary by device), or uninstall the app. Exported files and copies shared with other apps or remote servers remain in those locations until you delete them separately. On Apple platforms, remove saved credentials and synced data using the app and the relevant Keychain or iCloud controls; deleting the app alone may not remove Keychain or iCloud copies.

NovaScale does not require a separate developer-operated NovaScale account. Signing out, clearing local data, or uninstalling does not delete your Tailscale or identity-provider account, remove remote files, or automatically revoke reusable auth keys. Use your coordination server’s administration controls to remove devices or revoke keys, and contact the provider or your tailnet administrator for account and server-side data deletion. Tailscale provides a tailnet deletion guide. Each provider controls its own retention, including any security, backup, or legal retention.

For privacy requests about information you send directly to NovaScale, such as support correspondence, contact the address below. For information handled directly by Tailscale, Apple, Google, RevenueCat, or a self-hosted coordination server, contact the relevant provider or operator. Support correspondence is retained only as needed to handle your request and meet applicable legal obligations.

Changes to This Policy

We may update this Privacy Policy when NovaScale’s features or information-handling practices change. The date at the top indicates the latest revision.

Contact

If you have questions or privacy requests concerning NovaScale, contact us at:

• Website: https://galaxnet.dev/nova/
• Email: [email protected]