Summary
Nothing collected
No analytics, advertising, tracking or third-party SDKs, and no account to create.
Keys stay on your device
Your AWS credentials are kept in the iOS Keychain and used only to sign requests to AWS.
Straight to AWS
We run no servers that your data passes through. The app talks to AWS and nobody else.
CloudPeek (“we”, “us”) makes the CloudPeek app for iPhone and iPad and this website, cloudpeek.app. CloudPeek is independent and isn't affiliated with Amazon Web Services or Apple.
The CloudPeek app
What we collect
Nothing. The app has no analytics, crash-reporting or advertising SDKs, doesn't use advertising identifiers, and doesn't ask you to create an account. Its App Store privacy label is Data Not Collected.
What stays on your device
To show your dashboards, the app keeps some information on your iPhone or iPad. It never leaves the device except as described in the next section.
- Your AWS sign-in. An IAM access key ID and secret (and a session token if you use temporary credentials), or the tokens and role credentials IAM Identity Center issues, along with details shown in the app such as your account ID, region and access portal URL. These are kept in the iOS Keychain, readable only by CloudPeek and its widgets. They're available after you first unlock the device, so widgets can refresh while it's locked, and they're never synced to iCloud Keychain or restored to a different device.
- Your pinned widgets and the dashboard data the app has fetched. These are cached so widgets can show your latest data. They're stored in storage shared only between the app and its own widgets.
- Your settings, such as how often widgets refresh.
Who the app talks to
Only Amazon Web Services. The app and its widgets send requests directly from your device to AWS: Amazon CloudWatch for dashboards, metrics and alarms, AWS STS to check your access key, and IAM Identity Center if you sign in with it. Each request is signed with your credentials on the device. When you sign in with IAM Identity Center, you approve the sign-in on AWS's own website in your browser.
Like any request to AWS, these requests show AWS your IP address and the data you ask for. AWS handles that under the AWS Privacy Notice and your agreement with AWS. We never receive your credentials, your AWS data or anything else from the app.
The built-in sample dashboards run entirely on your device and don't contact anyone.
Apple
Apple handles App Store downloads and purchases under Apple's privacy policy. If you've chosen to share analytics with app developers, Apple may send us anonymised crash reports and usage statistics. You can turn this off in Settings › Privacy & Security › Analytics & Improvements.
Removing your data
Remove Account, on the app's Accounts tab, removes that account's AWS credentials and the widgets pinned from it, and Remove All Accounts, in the app's Settings, removes every account's credentials and all pinned widgets from the device. Deleting the app removes the rest of what it stored. iOS can keep Keychain items after an app is deleted, so remove your accounts first if you want to be sure your credentials are gone.
If you stop using CloudPeek, also deactivate or delete its access key in the IAM console, or remove its IAM Identity Center assignment. That way the credentials stop working wherever they are.
This website
cloudpeek.app is a static website. It uses no cookies, analytics, advertising, or third-party scripts or fonts, and it stores nothing in your browser.
The site is delivered by Amazon CloudFront and Amazon S3. Like any web server, they receive the technical information needed to send you a page: your IP address, your browser's user agent, the page you asked for and when. This may be kept in standard server logs for a limited time, for security and troubleshooting, and isn't used to identify or track you.
The downloads on our setup guide, such as the CloudFormation template, are plain files. They run only if you choose to use them in your own AWS account.
If you email us
If you contact us, we use your email address and message only to reply and to help you. We keep the conversation only as long as we need it for that, and we never add you to a mailing list or share your details.
Your rights
We don't collect personal data through the app or the website, so there's usually nothing for us to show you, correct or delete. If you've emailed us, you can ask to see or delete that correspondence. Depending on where you live (for example under the GDPR in the UK and EU, or the CCPA in California) you may also have the right to complain to a data protection authority.
We don't sell or share personal information, and we don't use it for advertising.
Children
CloudPeek is a tool for people who manage AWS accounts. It isn't directed at children, and we don't knowingly collect information from anyone under 13 (or the minimum age in your country).
Changes to this policy
If we change this policy, we'll update this page and the effective date at the top. If a change affects what the app does with your information, we'll also say so in the app's release notes.
Contact
Questions about privacy? Email support@cloudpeek.app.