Privacy policy

Last updated: 24 October 2026

Orbitplan is a mobile client for HCP Terraform, published by Niura. This page explains what the app does with your data. It is written to be read, not skimmed past.

What the app stores on your device

• Your HCP Terraform API token and host, kept in the system keychain (Android Keystore or iOS Keychain).
• Preferences such as theme, selected organization, pinned workspaces and notification choices.

What the app sends, and where

• Requests to the HCP Terraform host you sign in to (app.terraform.io, or your own Terraform Enterprise host), authenticated with your token. This is how the app shows and changes your workspaces and runs.
• Nothing else. The app has no analytics, no advertising and no crash-reporting service, and it does not send your data to Niura.

Notifications

By default, alerts are produced on your device by checking your organization in the background and while the app is open. If a future version offers instant push through a Niura server, it will be optional and off until you turn it on. In that case the server would receive the run events your workspaces report (workspace and run identifiers, status) and a device push token, in order to deliver the alert. This section will be updated before that feature is released.

Signing in with the browser

The browser sign-in opens the HCP Terraform web login inside a private in-app window, so you can use SSO, GitHub or email. The session is discarded when the window closes. The app reads only the API token you create there.

Your choices

• Sign out in Settings to remove the token from the device.
• Revoke the token in HCP Terraform (User settings, Tokens) at any time.
• Uninstalling the app removes everything it stored.

Children

The app is meant for people who manage infrastructure and is not directed to children.

Contact

Questions about this policy: see niura.ad.

Trademarks

Orbitplan is not affiliated with, endorsed by or sponsored by HashiCorp or IBM. Terraform and HCP Terraform are trademarks of HashiCorp, Inc.