# Personal Cloud

> Personal Cloud syncs Cloak Proxy's rules, mock sets and API workspaces between your Macs, end-to-end encrypted, and shares captured requests as encrypted links.

Source: https://docs.subcloak.com/cloak-proxy/cloud/overview/

Added in Cloak Proxy 0.6.0.

Personal Cloud is an optional, paid add-on to Cloak Proxy. It keeps your rules, mock sets, API client workspaces, scopes and saved queries the same on all your Macs, and lets you send captured requests, a saved session or a HAR file to someone as a link they open in a browser. Everything is encrypted on your Mac before it's uploaded, with keys that only your computers hold: Subcloak stores your data but can't read it.

Cloak Proxy itself stays [free for life](https://docs.subcloak.com/cloak-proxy/getting-started/free-for-life/). Every feature outside Cloud works without an account, and Cloud is off until you buy it in **Settings › Cloud**. Nothing leaves your Mac until you choose what syncs.

{/* TODO(screenshot): cloud-settings-on-light (Settings › Cloud signed in: This Mac, What syncs, Sync issues, Share links, Devices, Plan, Account). Crop to This Mac and What syncs. */}

## What you can do

  **Sync between Macs**

    Rules, rule sets and folders, mock sets, API client workspaces, scopes, saved queries, highlight rules and filters follow you to every Mac you approve, on up to 5 Macs. See [What syncs](https://docs.subcloak.com/cloak-proxy/cloud/what-syncs/).

  **Share captured requests**

    Send a link to a few requests or a saved file. The recipient opens them read-only in a browser, with known secret formats redacted, and you see when and from where it was opened. See [Share links](https://docs.subcloak.com/cloak-proxy/cloud/share-links/).

  **Approve every Mac yourself**

    A new Mac joins only after you compare a 6-digit code on both screens, then restores everything in one step. See [Add another Mac](https://docs.subcloak.com/cloak-proxy/cloud/add-a-mac/).

  **Keep a way back in**

    A Recovery Kit gets your data back if you lose every Mac. See [Recovery Kit](https://docs.subcloak.com/cloak-proxy/cloud/recovery-kit/).

## What syncs and what stays on each Mac

You choose what syncs, type by type, and can change it any time in **Settings › Cloud › What syncs**.

| Syncs (when you tick it) | Stays on each Mac |
|---|---|
| **Rules, rule sets and folders**: Map Local, Map Remote, Rewrite, scripts, Block List, Allow List, breakpoints, Network Conditions, DNS Spoofing, alerts and failure scenarios | The root certificate and its private key |
| **Mock sets (including recorded responses)**, without recorded credential headers | Keychain tokens, `.env` files and AI keys |
| **API client workspaces**: collections, requests, environments, specs, flows, datasets, script packages and comments | Proxy and client-certificate passwords |
| **Scopes, saved queries, highlight rules and filters** | Which scope is active |
| **Settings (a short list)**, off by default: SSL Proxying hosts, Bypass hosts, muted hosts, the external proxy and client certificate hosts | The on/off switch of each debugging tool, and of every rule that can act on your Mac |
| **Secret variable values**, only if you tick it | File paths, "skip certificate checks" switches, history, Recently Deleted and monitors |

Some synced changes can do real harm on another Mac, such as a script or a Map Local rule that reads a local file. Those arrive switched off, and you [review them](https://docs.subcloak.com/cloak-proxy/cloud/review-changes/) before they run. The full list is on [What syncs](https://docs.subcloak.com/cloak-proxy/cloud/what-syncs/).

## Pricing

| Plan | Price |
|---|---|
| **Personal yearly** | $25 a year (save 31%) |
| **Personal monthly** | $3 a month |
| Founding offer | $20 for your first year, then $25 a year. Yearly plan only, for the first 50 yearly buyers. The app shows it while places are left. |

There's no free trial. You buy Personal Cloud in the app, and get a full refund within 30 days if it isn't for you.

- A plan covers up to 5 computers and 5 GB of encrypted storage.
- **Polar is our merchant of record and handles tax.** You pay on Polar's checkout page, and Polar sends the receipts.
- **30-day refunds, no questions.**
- If you cancel, Cloud works until the end of the period you paid for. Then your Cloud data is read-only for 30 days, and then deleted. The data on your Macs is never affected.

See [Plans and billing](https://docs.subcloak.com/cloak-proxy/cloud/plans-and-billing/) for checkout, managing billing and cancelling.

## How your data is protected

- **End-to-end encrypted.** Your Macs encrypt everything with AES-256-GCM before it's uploaded. The keys live in each Mac's Keychain and on your Recovery Kit, never on Subcloak's server.
- **Your Macs check the server.** Every change is signed by the Mac that made it, and the list of your computers is a signed, chained record. A Mac refuses data, keys or computers that your own computers didn't sign.
- **You approve every computer.** A new Mac gets your account key only after you've compared a code on both screens and approved it.
- **A Security code to compare.** Settings › Cloud › Devices shows a 12-digit code worked out from your account's computers and keys. If it's the same on all your Macs, they agree on who can read your data.

[Security and privacy](https://docs.subcloak.com/cloak-proxy/cloud/security/) explains the design, what Subcloak can and can't see, and the limits.

> **Requirements:**
> Cloak Proxy on a Mac with macOS 14 or later, and an email address you can read. Personal Cloud isn't in the [Linux beta](https://docs.subcloak.com/cloak-proxy/getting-started/install-linux/) yet.

## Personal Cloud and Team Cloud

(added in Cloak Proxy 0.7.0)

Personal Cloud is for one person's own Macs. [Team Cloud](https://docs.subcloak.com/cloak-proxy/team/overview/) is the plan for a team: shared workspaces, rule and mock sets, a vault with per-person access, reviews, CI, SSO and SCIM, bought per seat in a web console. They're separate subscriptions with separate keys: a Team seat doesn't include Personal Cloud, and you can use both on the same Mac. Nothing moves between them unless you choose **Copy to Team…** or **Copy to Personal**.

| | Personal Cloud | Team Cloud |
|---|---|---|
| For | Your own Macs | A team |
| Bought | In the app, **Settings › Cloud** | In the console, `console.subcloak.com/start` |
| Price | $3 a month or $25 a year | $5 a seat a month, or $48 a seat a year, 2 seats minimum |
| Share links | Yes | No |
| Shared spaces, vault, reviews, CI, SSO, SCIM, audit log | No | Yes |

## If your organization manages your Mac

An administrator can turn Cloud off with a managed preference. Settings › Cloud then says **Personal Cloud is turned off by your organisation**: sync stops, Cloak Proxy makes no Cloud connections on that Mac, and your rules, mocks and API workspaces there stay as they are. Data already in your Personal Cloud account isn't deleted. To delete it, sign in from a computer your organization doesn't manage, or email `hello@subcloak.com`.

| Managed preference (domain `com.subcloak.cloakproxy`) | Type | What it does |
|---|---|---|
| `CloudDisabled` | Boolean | `true` turns off Cloud completely: no Cloud settings, no hints and no Cloud connections. |
| `CloudShareLinksDisabled` | Boolean | `true` hides share links (the app, the `create_share_link` MCP tool and `cloakctl share`). |
| `CloudPersonalDisabled` (added in Cloak Proxy 0.7.0) | Boolean | `true` turns off Personal Cloud only, and leaves [Team Cloud](https://docs.subcloak.com/cloak-proxy/team/overview/) on. `CloudDisabled` turns off both. |

See [Deploy to a team](https://docs.subcloak.com/cloak-proxy/getting-started/deploy-to-a-team/) for configuration profiles.

## Related

  - [Get started](https://docs.subcloak.com/cloak-proxy/cloud/get-started/): Sign in, set up your first Mac and save the Recovery Kit.
  - [What syncs](https://docs.subcloak.com/cloak-proxy/cloud/what-syncs/): Every type, what stays on each Mac, and conflicts.
  - [Security and privacy](https://docs.subcloak.com/cloak-proxy/cloud/security/): How the encryption works and what Subcloak can see.
  - [Plans and billing](https://docs.subcloak.com/cloak-proxy/cloud/plans-and-billing/): Prices, checkout, refunds and cancelling.