Privacy Policy
Last Updated: January 2025
Important: This Privacy Policy describes how Cloudata ("we," "us," or "our") collects, uses, and protects your personal information when you use our mobile application.
1. Information We Collect
1.1 Account Information
When you sign in to Cloudata using Google Sign-In via AWS Cognito, we collect:
- Email address: Used for account identification and communication
- Name: Used for personalizing your experience
- Profile information: Provided by your Google account
1.2 Files and Content
Cloudata is a cloud storage application. We store the following on your behalf:
- User Files: Photos, videos, documents, contacts, and music files that you choose to back up
- File Metadata: File names, sizes, upload dates, and categories
- Thumbnails: Generated previews of photos and videos for display purposes
1.3 Usage Information
To improve our service, we may collect:
- App analytics: Feature usage, crash reports, and performance data
- Device information: Device type, operating system version
- Storage metrics: Amount of storage used and available
2. How We Use Your Information
We use the collected information for the following purposes:
- Provide Cloud Storage Services: Store, sync, and retrieve your files securely
- Account Management: Authenticate users and manage account settings
- Service Improvement: Analyze usage patterns to enhance features and performance
- Communication: Send important service updates and notifications
- Security: Detect and prevent fraud, abuse, and unauthorized access
3. Data Storage and Security
3.1 AWS Infrastructure
All your data is stored securely on Amazon Web Services (AWS) infrastructure:
- AWS S3: Files are stored in encrypted S3 buckets with private access controls
- AWS Cognito: Authentication is handled through AWS Cognito with industry-standard security
- AWS DynamoDB: File metadata is stored in DynamoDB with encryption at rest
- Encryption: All data is encrypted both in transit (HTTPS/TLS) and at rest
3.2 Access Controls
- Files are stored in private S3 buckets accessible only to the authenticated user
- AWS IAM policies enforce strict access controls
- User data is isolated using AWS Cognito Identity IDs
4. Data Sharing and Disclosure
We do NOT sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- With Your Consent: When you explicitly authorize us to share information
- Service Providers: AWS provides the infrastructure for storage and authentication
- Legal Requirements: When required by law, court order, or government regulation
- Security Threats: To protect against fraud, abuse, or security threats
5. Your Rights and Choices
5.1 Data Access and Control
You have the following rights regarding your data:
- Access: View and download all your stored files at any time
- Modification: Update your account information (name, profile) in Settings
- Deletion: Delete individual files or your entire account
- Export: Download all your files before account deletion
5.2 Account Deletion
You can delete your account at any time through the app's Settings. Upon account deletion:
- All your files will be permanently deleted from AWS S3
- Your account information will be removed from our systems
- File metadata will be deleted from DynamoDB
- This action is irreversible and cannot be undone
6. Data Retention
We retain your data as follows:
- Active Accounts: Data is retained while your account is active
- Deleted Files: Permanently deleted immediately upon user request
- Closed Accounts: Data is permanently deleted within 30 days of account closure
- Backup Data: AWS may maintain backups for disaster recovery for up to 90 days
7. Children's Privacy
Cloudata is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
8. Third-Party Services
Cloudata integrates with the following third-party services:
- Google Sign-In: For authentication (governed by Google's Privacy Policy)
- AWS Services: For cloud storage and infrastructure (governed by AWS Privacy Policy)
9. International Data Transfers
Your data may be stored and processed in AWS data centers located in various regions worldwide. AWS complies with applicable data protection laws and provides appropriate safeguards for international data transfers.
10. Cookies and Tracking
Cloudata is a mobile application and does not use browser cookies. We may use mobile analytics tools to improve app performance and user experience.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy in the app
- Updating the "Last Updated" date
- Sending an in-app notification for significant changes
Your continued use of Cloudata after changes constitutes acceptance of the updated Privacy Policy.
12. Contact Us
13. Your California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
14. GDPR Compliance (European Users)
If you are in the European Economic Area, you have additional rights under GDPR:
- Right to access your data
- Right to rectification of incorrect data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
© 2025 [COMPANY NAME]. All rights reserved.