# Privacy Policy for Clouder **Effective Date: January 5, 2026 (2026-01-05)** ## 1. Introduction This Privacy Policy describes how Clouder ("we," "our," or "the app") collects, uses, and protects your information when you use our iOS application. By using Clouder, you agree to the collection and use of information in accordance with this policy. ## 2. Information We Collect ### 2.1 Information You Provide - **Cloudflare API Token**: You provide a "Manager Token" from your Cloudflare account. This token must be created using the "Create Additional Tokens" template and have the "API Tokens: Edit" permission, which allows Clouder to create service-specific tokens on your behalf - **Account Selection**: When you authenticate, you select which Cloudflare account to manage if you have multiple accounts - **Audio Recordings**: When using the Workers AI speech recognition feature, you may record audio using your device's microphone - **Photos**: When using Workers AI image classification or object detection features, you may capture photos using your device's camera or select images from your photo library - **Text Content**: When using Workers AI features like summarization, translation, or text generation, you provide text input ### 2.2 Automatically Collected Information - **Usage Data**: Basic app usage statistics (features used, crash reports) - **Device Information**: iOS version, device model, app version ### 2.3 AI Assistant Data Collection - **Chat Conversations**: When you use the Clouder AI chat assistant, your questions and conversation history are sent to our secure proxy server for processing - **Support ID**: A unique anonymous identifier generated on your device for rate limiting and support purposes ### 2.4 Information We Do NOT Collect - Personal identification information (name, email, phone number) unless you contact support - Location data - Contact information - Payment information (handled by Apple App Store) - Actual stored data content (R2 object contents, KV values, D1 database rows) - Cloudflare account passwords ## 3. How We Use Your Information We use the collected information solely to: - **Authentication**: Verify your Cloudflare Manager Token and establish secure connections to your Cloudflare account - **Token Management**: Automatically create and manage a "Clouder App Token" with specific permissions for each Cloudflare service (Workers, R2, KV, D1, Pages, DNS, etc.). This token is created using your Manager Token and is used for all API operations within the app - **Resource Management**: Enable management of Workers, Pages, R2, KV, D1, Queues, Durable Objects, DNS, and other Cloudflare services - **Workers AI**: Process audio recordings for speech-to-text, images for classification/detection, and text for AI features - **AI Assistance**: Provide AI-powered help through the chat feature (optional, Pro subscription) - **Analytics Display**: Show you analytics and metrics about your Cloudflare resources - **Preferences**: Save your settings and preferences locally on your device - **Performance**: Improve app performance and fix bugs - **Rate Limiting**: Enforce usage limits on AI features ## 4. Data Storage and Security ### 4.1 Local Storage - **Manager Token**: Your Cloudflare Manager Token (with "API Tokens: Edit" permission) is stored locally on your device - **Clouder App Token**: The service token created by Clouder (with permissions for Workers, R2, D1, KV, Pages, DNS, etc.) is cached locally per account - **Account Information**: Selected account ID and preferences are stored locally - **No Server Storage**: We do NOT store your API tokens or credentials on any external servers - **Device Security**: Your credentials are protected by your device's security (passcode, Face ID, Touch ID) ### 4.2 Fresh Install Detection - Uninstalling the app will clear all stored credentials upon reinstallation - This ensures your sensitive data doesn't persist after app removal ### 4.3 Media Data - **Audio Recordings**: Recorded audio for speech recognition is processed in real-time and not stored permanently - **Photos**: Images captured or selected for AI analysis are processed and not stored on our servers - **Temporary Files**: Any temporary media files are deleted after processing ### 4.4 AI Chat Data - Chat conversations are NOT stored permanently on our servers - Conversations are processed in real-time and forwarded to AI providers - Your Support ID is hashed for privacy before being used for rate limiting - No Cloudflare credentials or infrastructure data is sent to AI services ## 5. Third-Party Services ### 5.1 Cloudflare - **Two-Token Architecture**: Clouder uses a two-token system: 1. **Manager Token** (you provide): Used only to create and manage the Clouder App Token 2. **Clouder App Token** (auto-created): Used for all actual API operations (Workers, R2, D1, KV, Pages, DNS, etc.) - **Direct API Access**: Clouder connects directly to Cloudflare's APIs using these tokens - **Data Flow**: All operations (Workers deployment, R2 uploads, D1 queries, etc.) occur directly between your device and Cloudflare servers - **No Data Interception**: We do not intercept, store, or process your Cloudflare data on any intermediate servers (except for AI features) - **Token Lifecycle**: The Clouder App Token is automatically created on first use and expires after 30 days (auto-renewed). It can be viewed and managed in Settings > Service Tokens - **Workers AI**: When using Workers AI features, requests are sent to Cloudflare's Workers AI APIs - **Cloudflare Terms**: Your use of Cloudflare is governed by Cloudflare's own privacy policy and terms of service ### 5.2 AI Services (Chat Assistant) - **Service Provider**: Clouder AI uses AI models to provide intelligent assistance about Cloudflare products and services - **Data Transmitted**: Your chat messages are sent via our secure proxy server to AI providers for processing - **Data NOT Transmitted**: API tokens, credentials, account IDs, infrastructure information, or any Cloudflare data - **No Permanent Storage**: We do not store your AI conversations on our servers after processing - **Usage Limits**: AI chat features may have usage limits based on your subscription tier **IMPORTANT**: Do not share API tokens, passwords, personal information, or other sensitive data in AI chat conversations. ### 5.3 RevenueCat - **Subscription Management**: We use RevenueCat to manage Pro subscriptions - **Anonymous Data**: RevenueCat receives anonymous purchase data from Apple - **No Personal Data**: We do not share personal information with RevenueCat - **RevenueCat Privacy**: Subject to RevenueCat's privacy policy ### 5.4 Apple Services - App Store for distribution and in-app purchases - StoreKit for subscription management - Your subscription data is managed by Apple ## 6. Camera and Microphone Usage ### 6.1 Microphone Access - **Purpose**: Record audio for speech-to-text transcription using Workers AI - **When Used**: Only when you explicitly tap the record button in the Speech Recognition feature - **Data Handling**: Audio is converted to data, sent to Cloudflare Workers AI for transcription, and not stored permanently - **Control**: You can deny microphone permission at any time in iOS Settings ### 6.2 Camera Access - **Purpose**: Capture photos for image classification and object detection using Workers AI - **When Used**: Only when you explicitly tap the camera button in Image Classification or Object Detection features - **Data Handling**: Photos are sent to Cloudflare Workers AI for analysis and not stored permanently on our servers - **Control**: You can deny camera permission at any time in iOS Settings ## 7. Data Sharing We do NOT: - Sell, trade, or rent your information to third parties - Share your API tokens or credentials with anyone - Access your Cloudflare data for any purpose other than app functionality - Store your AI chat conversations permanently - Share your recorded audio or captured photos with third parties other than Cloudflare Workers AI We DO share: - AI chat messages and infrastructure metadata with AI providers for processing (as described in Section 5.2) - Audio and image data with Cloudflare Workers AI when you use those features - Anonymous usage data with our proxy server for rate limiting purposes ## 8. Your Rights You have the right to: - **Log Out**: Remove all stored API tokens and credentials from your device at any time - **View Stored Data**: See what authentication information is stored on your device - **Delete Credentials**: Remove your API token and clear all authentication data - **Clear Chat History**: Delete AI chat conversation history at any time - **Decline AI Features**: Choose not to use the AI chat, speech recognition, or image analysis features - **Deny Permissions**: Decline camera and microphone access in iOS Settings - **Uninstall**: Permanently remove all local data by uninstalling the app - **Manage Subscriptions**: Control your Pro subscription through iOS Settings - **Access Support ID**: View your anonymous Support ID from the app's settings ## 9. Children's Privacy Clouder is not intended for use by children under 13 years of age. We do not knowingly collect information from children under 13. ## 10. Disclaimer and Limitation of Liability ### 10.1 No Warranty CLOUDER IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. ### 10.2 Limitation of Liability IN NO EVENT SHALL THE DEVELOPER OF CLOUDER BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE APP OR THE USE OR OTHER DEALINGS IN THE APP. ### 10.3 User Responsibility - **Device Security**: You are solely responsible for securing your device. Your Cloudflare tokens are stored on your device - **Manager Token Requirements**: Your Manager Token must be created using the "Create Additional Tokens" template with "API Tokens: Edit" permission. This allows Clouder to create service-specific tokens automatically - **Token Security**: Protect your device with a passcode, Face ID, or Touch ID - **Actions and Liability**: You are responsible for any actions taken using your Cloudflare credentials through the app - **AI Chat Content**: You are responsible for the content you share in AI chat conversations - **Media Content**: You are responsible for the audio you record and photos you capture - **Sensitive Information**: Do not share API tokens, passwords, personal data, or other secrets in AI chats - **Data Loss**: We are not liable for any data loss, security breaches, service disruptions, or damages resulting from your use of the app - **Risk Acknowledgment**: You use this app, including its management capabilities, AI features, and media capture, at your own risk ### 10.4 Third-Party Services - We are not responsible for the availability, accuracy, or reliability of Cloudflare services - We are not liable for any issues arising from Cloudflare service interruptions or changes - Your relationship with Cloudflare is governed by their terms, not ours - We are not responsible for AI responses, accuracy, or any actions taken based on AI suggestions - AI-generated content may contain errors and should be verified before use in production environments - Workers AI results (transcriptions, classifications, detections) may not be 100% accurate ### 10.5 No Professional Advice This app and its AI features are not intended to provide professional infrastructure or security advice. AI suggestions and Workers AI results should be reviewed and verified before implementing in production environments. Always consult with qualified professionals for critical infrastructure operations. ## 11. Indemnification You agree to indemnify, defend, and hold harmless the developer of Clouder from and against any and all claims, liabilities, damages, losses, costs, expenses, or fees arising from your use of the app or violation of these terms. ## 12. Changes to This Privacy Policy We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Effective Date" at the top of this policy. Continued use of the app after changes constitutes acceptance of the updated policy. ## 13. Data Retention - **Manager Token**: Remains stored locally until you log out or uninstall the app - **Clouder App Token**: Cached per account, expires after 30 days (auto-renewed), deleted when you log out - **Account Preferences**: Remain stored until you log out or uninstall the app - **AI Chat Conversations**: NOT stored on our servers after processing - **Audio Recordings**: Deleted immediately after transcription processing - **Captured Photos**: Deleted immediately after AI analysis processing - **Support ID**: Persists locally until you uninstall the app - **Rate Limiting Data**: Automatically deleted after the rate limit window expires - **No Remote Access**: We do not have access to delete your locally stored data remotely - **Subscription Information**: Retained by Apple and RevenueCat according to their policies ## 14. International Use This app is designed for use globally. By using Clouder outside of your country, you consent to the transfer and processing of your data in accordance with this policy. Cloudflare services may process your data in various locations according to their infrastructure. ## 15. Contact Information For questions about this Privacy Policy or the app, please contact: - Email: jean.robert.nino@icloud.com - Through the in-app contact form - App Store: Through the App Store support feature ## 16. Acceptance of Terms By using Clouder, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and accept all risks associated with using the app. ## 17. Severability If any provision of this Privacy Policy is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this Privacy Policy will otherwise remain in full force and effect. ## 18. Governing Law This Privacy Policy is governed by the laws applicable to software distributed through the Apple App Store, without regard to conflict of law principles. --- **Remember**: Clouder is an independent tool not affiliated with Cloudflare, Inc. Use at your own discretion and risk.