Cloud - Privacy Policy | 隐私政策

Summary: Cloud is designed with zero telemetry and zero cloud relay. All communication occurs directly between your mobile device and your self-hosted server.

1. Core Privacy Principles

Cloud is built for software engineers who value strict code confidentiality and data sovereignty:

Zero-Relay, Zero-Storage: We do not operate intermediary servers that intercept, cache, or store your source code, prompts, or LLM conversations.
Pure Direct Connection: The mobile client connects directly to your designated Host server over your private network, LAN, or Tailscale mesh.
No User Profiling or Tracking: Cloud contains no commercial advertisement SDKs, analytics frameworks, or behavioral profiling tools.

2. Data Collection and Usage

2.1 Local Connection Data

To enable network connectivity with your development environment, Cloud locally persists:

Host server network addresses (e.g., IP address, port, domain);
Host Access Tokens for authentication;
UI preferences such as theme, font sizing, and preferred language.

Security Guarantee: Sensitive credentials (access tokens) are exclusively stored in platform-native secure hardware enclaves (iOS Keychain and Android Keystore), protected against unauthorized access.

2.2 Transmission of Session and Code Data

Chat conversations, syntax-highlighted code blocks, and tool execution logs stream directly between your mobile client and your private host.
Data travels directly to and from your self-hosted environment. The developers of Cloud cannot view, collect, or audit any of your data.

3. Third-Party Services and SDKs

Cloud does not integrate third-party ad networks (such as Google AdMob) or behavioral telemetry trackers (such as Firebase Analytics or Mixpanel).
Network interactions are powered by the Claude Agent SDK protocol connecting to your self-hosted host. Any external LLM API usage is governed by your own API agreements with respective model providers.

4. Security Safeguards

Encrypted transport protocols (TLS/HTTPS/WSS) are fully supported.
Destructive operations (such as file modifications or shell execution) require interactive approval via mobile Bottom Sheets.
Users may wipe all local credentials and cached session indexes at any time via in-app settings.

5. Children's Privacy

Cloud is a specialized tool intended for professional software developers and does not knowingly collect personal data from children under the age of 13.

6. Changes to This Policy

Any updates to this Privacy Policy will be published directly to this public repository and website.

7. Contact Information

For questions or requests regarding this Privacy Policy, please contact:

Email: cddch1n@icloud.com
GitHub Issues: https://github.com/cddchen/Cloud/issues

1. 核心隐私原则

Cloud 专为重视代码安全与商业机密的开发者打造：

零中继与零存储 (Zero-Relay, Zero-Storage)：我们不设立任何收集或缓存您代码、Prompt、聊天会话的云端中间服务器；

纯私有直连 (Direct Private Connection)：客户端与您指定的 Host 服务端建立端到端直连通信（局域网、Tailscale 或反向代理）；

无用户画像与追踪 (No Tracking, No Profiling)：本应用不包含广告 SDK、第三方行为追踪统计或分析 SDK。

2. 数据收集与处理说明

2.1 本地存储的配置与凭据

为了使应用正常连接至您的开发环境，应用会在本地设备中持久化保存：

服务端地址与端口（如局域网 IP、域名或 Tailscale 节点）；

鉴权访问令牌 (Host Access Token)；

界面外观、字体大小及语言等偏好设置。

安全保证：敏感访问令牌由操作系统的硬件安全模块托管（iOS 采用 Keychain，Android 采用 Keystore），外部应用无法读取。

2.2 传输中的会话与代码数据

会话交互、代码高亮、终端输出均仅在移动端与您的 Host 服务端之间直接传输；

数据均直接流向您自己托管或配置的服务端，本应用开发者无法获知、收集或审查您的任何业务数据。

3. 第三方服务与 SDK 说明

本应用不集成任何第三方商业广告（如 Google AdMob）、行为数据分析平台（如 Google Analytics、Firebase 等）；

本应用使用 Claude Agent SDK 协议与服务端通信，相关 LLM API 调用直接取决于您在服务端配置的模型服务商。

4. 数据安全保障

支持基于 TLS/HTTPS/WSS 的端到端加密传输；

支持敏感操作（命令执行、文件覆写）移动端双重确认与审批机制；

移动端会话缓存仅用于离线浏览历史，用户可随时通过“清空缓存”或“移除 Host”在端侧彻底擦除所有关联数据。

Privacy Policy