UPS Power Monitor

How the App Can Be Used

UPS Power Monitor can be used entirely offline on your Mac or paired with the optional UPS Cloud Subscription that synchronizes data through our AWS backend. Designed for enthusiasts who run sophisticated setups at home or in small offices, this policy explains what information is handled in each scenario and how it is protected.

• Local Monitoring (default) - all UPS configurations and NUT related data remain on your device and never leave your network.
• UPS Cloud Subscription (optional) - authenticated users can sync UPS telemetry, enable multi-device monitoring, and receive push notifications via AWS services running in the eu-west-1 (Ireland) region.

Data Stored Locally on Your Mac

When you stay offline, the application keeps the following inside your macOS sandbox and Keychain: UPS IP addresses or hostnames, ports, friendly names, monitoring preferences, cached telemetry, and optional NUT usernames/passwords. This information is never transmitted unless you explicitly enable cloud sync. NUT passwords are never uploaded to the cloud and stay solely in your local Keychain (or iCloud Keychain if you have that system feature enabled). If iCloud Keychain sync is disabled, each additional Mac must be authenticated manually with the protected NUT server. Removing a UPS profile deletes its associated local cache.

Data Processed via UPS Cloud Subscription

If you sign in with Apple and activate the cloud subscription, we store the minimum data required to provide remote access, shared monitoring, and push notifications:

• Account data - Apple provides an identifier and the email address you approve (which may be an Apple relay address). These details are held in AWS Cognito to authenticate you. We do not receive your Apple password.
• UPS metadata - device IDs, friendly names, configured IP addresses, monitored ports, NUT usernames (no passwords), manufacturer/model info, and monitoring preferences so that other signed-in devices know what to manage.
• Telemetry - current UPS status strings, selected parameter history, last update timestamps, and which monitoring Mac performed the upload. This enables charts, staleness detection, and cross-device status views.
• Protected device information - optional shutdown rules you define (device names, IP addresses, trigger thresholds) so automation policies can be enforced centrally.
• Device registration data - push notification tokens, platform type (iOS/macOS), friendly device name, app version, and limited delivery statistics so we can notify you about outages. Tokens automatically expire when inactive or when you revoke notifications.
• Monitoring diagnostics - AWS stores short-lived records about stale intervals (when a UPS goes offline and when it recovers). These records expire automatically after one year to provide auditability without building long-term profiles.

Cloud data is encrypted at rest by AWS services and in transit via TLS. We do not collect payment card data; Apple handles all App Store transactions.

Diagnostics and Analytics

To keep the experience reliable for prosumers, the macOS apps send limited diagnostics to two processors:

• Mixpanel records anonymous usage events (feature toggles, screen views, subscription conversion) alongside device model, macOS version, and app build. Events are tagged with a random identifier, not your name or email.
• Sentry captures crash reports and non-sensitive logs to help us debug issues. Reports contain stack traces, device model, OS version, and app state metadata but never include UPS passwords or raw telemetry.

You can opt out by disabling analytics in the application settings; when disabled, Mixpanel and Sentry receive no new events from that device.

Authentication, Billing, and Support

• Sign in with Apple is required only for UPS Cloud features. You can revoke access at any time from your Apple ID settings.
• Subscriptions are managed by Apple. We receive only the entitlement state (active, expired, in trial) from StoreKit; no credit card numbers are ever shared with us.
• Email support - if you email support@upsmonitor.app, we retain your message for troubleshooting and quality assurance. Send another email if you want previous conversations removed.

How We Use Your Data

• Provide UPS monitoring, charts, and notifications across your signed-in devices.
• Verify subscription eligibility and entitlement to enable or disable cloud-only features.
• Deliver push notifications about UPS staleness or recovery events that you have enabled.
• Maintain platform security, abuse prevention, and operational logs within AWS CloudWatch.

We do not sell or rent your information and we do not run third-party advertising SDKs.

Push Notifications

Notifications include the UPS name you configured and a short status message (for example, "UPS Offline: Home Office UPS"). Device tokens are stored in AWS SNS solely to deliver these alerts and are removed automatically when you sign out, disable notifications, or after extended inactivity.

Sharing and Service Providers

Your data is shared only with vendors that help operate UPS Power Monitor: Apple (App Store billing and Sign in with Apple), Amazon Web Services (Cognito, AppSync, DynamoDB, Lambda, SNS, CloudWatch, CloudFront), Mixpanel (usage analytics), and Sentry (crash diagnostics). These processors act on our behalf under their own security certifications. We may disclose information if required by law or to investigate abuse.

Data Retention and Deletion

• Local-only users can delete UPS profiles or uninstall the app to remove local data.
• Cloud users can remove an individual UPS, disable push notifications, or delete their entire UPS Cloud account (Settings -> UPS Cloud Account -> Delete Account). This triggers server-side deletion of your UPS records, parameters, protected devices, device tokens, and Cognito identity.
• Staleness history and CloudWatch logs are pruned automatically based on operational retention policies (currently up to 12 months).

You may also request deletion or a copy of your cloud data by emailing support with the Apple ID used in the app.

Security

We use macOS Keychain for sensitive local secrets, enforce TLS for every network request, restrict access through AWS IAM policies, and monitor infrastructure for unauthorized access. Despite these safeguards, no system is 100% secure, so please keep your devices updated and protected.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or object to the processing of your personal data. Contact us at support@upsmonitor.app to exercise these rights. We may need to verify ownership of the Apple ID associated with your account.

Children's Privacy

UPS Power Monitor is intended for prosumers and professional/home IT users and is not directed to children under 16. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this policy as the product evolves. The latest version is always available on this page, and material changes will be communicated inside the application. Continued use of UPS Power Monitor after changes become effective constitutes acceptance of the updated policy.