Privacy policy

Short version: Drover talks only to your Nomad clusters and, for the purchase, to Google Play. Nothing about your clusters leaves your phone. There are no analytics, ads, trackers or accounts.

Last updated: 9 November 2026

What Drover keeps on your phone

• The clusters you add: their names, addresses, ACL tokens, and any certificates you import. Tokens and keys are encrypted with a key held in Android Keystore.
• Your settings: theme, read-only mode, which warnings you turned off or muted, alert choices.
• Whether you bought the unlock (yes or no, nothing more), so the app keeps working when Google Play can't be reached.
• When your free trial started (one date, nothing more), so the trial counts its 7 days.

Android's cloud backup copies only that date, so a restored phone keeps its trial; nothing else of Drover's is backed up. If you move to a new phone with Android's device-to-device transfer, your settings may come along, but your clusters, tokens, certificates and the unlock never do: they stay on the phone they were entered on. Removing a cluster deletes its address, token and certificates from the phone. Uninstalling Drover deletes everything.

Where Drover connects

• Your Nomad agents, at the addresses you entered, to show and act on your clusters. What Drover reads from them (jobs, allocations, logs, files, variables, events) is shown on the phone and is never sent anywhere else.
• Google Play, through the Play Store app on your phone, to sell and check the one-time unlock.

That's all. The developer runs no servers Drover talks to. Drover has no analytics, advertising, attribution or tracking code, and no account to sign in to.

Some actions hand data to other apps because you asked: copying a value to the clipboard, saving a log or file to your phone's storage, sharing a file, or opening a cluster's web UI in your browser.

The purchase

Google Play handles the payment. The developer never sees your card or payment details. Google shares with the developer the order details Play Console shows every seller, such as an order number, the country, the price and the date. Google Play's billing library on your phone also sends Google information about the purchase flow so it can process and troubleshoot payments; Google's own privacy policy covers that.

Crash reports

Drover has no crash reporter of its own and sends no crash reports. If you chose to share usage and diagnostics with Google in your phone's settings, Android may send Google a report when Drover crashes, which Google shows the developer in the Play Console: where in Drover's code it crashed, the device model and the Android version. Such a report can include an error message, which may name a cluster's host. You can turn this sharing off in Android's settings.

Children

Drover is a tool for people who run Nomad clusters and isn't directed at children.

Changes

If this policy changes, the new version appears on this page with a new date. A change that sends anything more off your phone would be called out in the app's release notes first.

Contact

Questions about privacy: [email protected].