Privacy policy

1. Introduction

This Privacy Policy describes how Clouder ("we," "our," or "the app") collects, uses, and protects your information when you use our iOS application. By using Clouder, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

2.1 Information you provide

• Cloudflare API Token: You provide a "Manager Token" from your Cloudflare account. This token must be created using the "Create Additional Tokens" template and have the "API Tokens: Edit" permission, which allows Clouder to create service-specific tokens on your behalf
• Account Selection: When you authenticate, you select which Cloudflare account to manage if you have multiple accounts
• Audio Recordings: When using the Workers AI speech recognition feature, you may record audio using your device's microphone
• Photos: When using Workers AI image classification or object detection features, you may capture photos using your device's camera or select images from your photo library
• Text Content: When using Workers AI features like summarization, translation, or text generation, you provide text input

2.2 Automatically collected information

• Usage Data: Basic app usage statistics (features used, crash reports)
• Device Information: iOS version, device model, app version

2.3 AI assistant data collection

• Chat Conversations: When you use the Clouder AI chat assistant, your questions and conversation history are sent to our secure proxy server
• Infrastructure Information: Information about your Workers, Pages projects, R2 buckets, KV namespaces, D1 databases, and other Cloudflare resources
• Support ID: A unique anonymous identifier generated on your device for rate limiting and support purposes, synced across your devices via iCloud Keychain

2.4 Information we do NOT collect

• Personal identification information (name, email, phone number) unless you contact support
• Location data
• Contact information
• Payment information (handled by Apple App Store)
• Actual stored data content (R2 object contents, KV values, D1 database rows)
• Cloudflare account passwords

3. How we use your information

We use the collected information solely to:

• Authentication: Verify your Cloudflare Manager Token and establish secure connections to your Cloudflare account
• Token Management: Automatically create and manage a "Clouder App Token" with specific permissions for each Cloudflare service (Workers, R2, KV, D1, Pages, DNS, etc.)
• Resource Management: Enable management of Workers, Pages, R2, KV, D1, Queues, Durable Objects, DNS, and other Cloudflare services
• Workers AI: Process audio recordings for speech-to-text, images for classification/detection, and text for AI features
• AI Assistance: Provide AI-powered help through the chat feature (optional, Pro subscription)
• Analytics Display: Show you analytics and metrics about your Cloudflare resources
• Preferences: Save your settings and preferences locally on your device
• Performance: Improve app performance and fix bugs
• Rate Limiting: Enforce usage limits on AI features

4. Data storage and security

4.1 Local storage

• Manager Token: Your Cloudflare Manager Token is stored securely in iOS Keychain on your device
• Clouder App Token: The service token created by Clouder is cached locally per account
• Account Information: Selected account ID and preferences are stored locally
• No Server Storage: We do NOT store your API tokens or credentials on any external servers
• Encryption: All sensitive data is encrypted using iOS native Keychain security features

4.2 Fresh install detection

Uninstalling the app will clear all stored credentials upon reinstallation. This ensures your sensitive data doesn't persist after app removal.

4.3 Media data

• Audio Recordings: Recorded audio for speech recognition is processed in real-time and not stored permanently
• Photos: Images captured or selected for AI analysis are processed and not stored on our servers
• Temporary Files: Any temporary media files are deleted after processing

4.4 AI chat data

• Chat conversations are NOT stored permanently on our servers
• Conversations are processed in real-time and forwarded to AI providers
• Your Support ID is hashed for privacy before being used for rate limiting

5. Third-party services

5.1 Cloudflare

• Two-Token Architecture: Clouder uses a two-token system: (1) Manager Token you provide, used only to create the Clouder App Token, and (2) Clouder App Token, auto-created for all API operations
• Direct API Access: Clouder connects directly to Cloudflare's APIs using these tokens
• No Data Interception: We do not intercept, store, or process your Cloudflare data on any intermediate servers (except for AI features)
• Token Lifecycle: The Clouder App Token expires after 30 days (auto-renewed) and can be viewed in Settings

5.2 AI services (chat assistant)

• Data Transmitted: Your chat messages and infrastructure information (Worker names, project names, resource configurations) are sent via our secure proxy server
• Data NOT Transmitted: Actual stored data content (file contents, database rows, KV values), API tokens, or other secrets
• No Permanent Storage: We do not store your AI conversations on our servers after processing

5.3 RevenueCat

• Subscription Management: We use RevenueCat to manage Pro subscriptions
• Anonymous Data: RevenueCat receives anonymous purchase data from Apple
• No Personal Data: We do not share personal information with RevenueCat

5.4 Apple services

• App Store for distribution and in-app purchases
• StoreKit for subscription management
• iCloud Keychain for Support ID synchronization across devices

6. Camera and microphone usage

6.1 Microphone access

• Purpose: Record audio for speech-to-text transcription using Workers AI
• When Used: Only when you explicitly tap the record button
• Data Handling: Audio is sent to Cloudflare Workers AI for transcription and not stored permanently
• Control: You can deny microphone permission at any time in iOS Settings

6.2 Camera access

• Purpose: Capture photos for image classification and object detection using Workers AI
• When Used: Only when you explicitly tap the camera button
• Data Handling: Photos are sent to Cloudflare Workers AI for analysis and not stored permanently on our servers
• Control: You can deny camera permission at any time in iOS Settings

7. Data sharing

We do NOT:

• Sell, trade, or rent your information to third parties
• Share your API tokens or credentials with anyone
• Access your Cloudflare data for any purpose other than app functionality
• Store your AI chat conversations permanently

We DO share:

• AI chat messages and infrastructure metadata with AI providers for processing
• Audio and image data with Cloudflare Workers AI when you use those features
• Anonymous usage data with our proxy server for rate limiting purposes

8. Your rights

You have the right to:

• Log Out: Remove all stored API tokens and credentials from your device at any time
• View Stored Data: See what authentication information is stored on your device
• Delete Credentials: Remove your API token and clear all authentication data
• Clear Chat History: Delete AI chat conversation history at any time
• Decline AI Features: Choose not to use the AI chat, speech recognition, or image analysis features
• Deny Permissions: Decline camera and microphone access in iOS Settings
• Uninstall: Permanently remove all local data by uninstalling the app
• Manage Subscriptions: Control your Pro subscription through iOS Settings

9. Children's privacy

Clouder is not intended for use by children under 13 years of age. We do not knowingly collect information from children under 13.

10. Disclaimer and limitation of liability

10.1 No warranty

CLOUDER IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10.2 User responsibility

• Device Security: You are solely responsible for securing your device
• Token Security: Protect your device with a passcode, Face ID, or Touch ID
• Actions and Liability: You are responsible for any actions taken using your Cloudflare credentials through the app
• Sensitive Information: Do not share API tokens, passwords, personal data, or other secrets in AI chats

10.3 Third-party services

• We are not responsible for the availability, accuracy, or reliability of Cloudflare services
• We are not liable for any issues arising from Cloudflare service interruptions or changes
• AI-generated content may contain errors and should be verified before use in production environments

11. Data retention

• Manager Token: Remains stored in iOS Keychain until you log out or uninstall the app
• Clouder App Token: Cached per account, expires after 30 days (auto-renewed), deleted when you log out
• AI Chat Conversations: NOT stored on our servers after processing
• Audio Recordings: Deleted immediately after transcription processing
• Captured Photos: Deleted immediately after AI analysis processing
• No Remote Access: We do not have access to delete your locally stored data remotely

12. Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Effective Date" at the top of this policy. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact information

For questions about this Privacy Policy or the app, please contact:

14. Acceptance of terms

By using Clouder, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and accept all risks associated with using the app.

Remember: Clouder is an independent tool not affiliated with Cloudflare, Inc. Use at your own discretion and risk.