← Back to Kairo Apps

Privacy Policy

Last updated: August 15, 2026

1. Who We Are

OpsToolbox for AWS ("the App") is developed and published by Kairo Apps, registered at Atlas Tower, Al. Jerozolimskie 123A, 02-017 Warsaw, Poland. Contact: [email protected].

2. Data We Do NOT Collect

We are privacy-first by architecture. The App:

• Does not collect, transmit, or store any AWS credentials on our servers. All credentials are stored locally on your device in the iOS Keychain.
• Does not proxy API calls. All requests go directly from your device to AWS endpoints.
• Does not include analytics, tracking, or telemetry SDKs. No Firebase Analytics, no Mixpanel, no Amplitude.
• Does not collect personal information unless you explicitly provide it (e.g., contacting support).
• Does not share data with third parties.

3. Data Stored on Your Device

The following data is stored locally on your device and never leaves it:

• AWS SSO tokens and STS credentials — encrypted in iOS Keychain, protected by biometric or passcode.
• Profile configuration — account IDs, region preferences, enabled services (stored in app sandbox).
• Cached dashboard data — for offline access, auto-expired after 24 hours.
• Audit log — local record of write actions you perform, retained for 90 days.
• Widget data — summary metrics shared with WidgetKit for lock/home screen display.

4. Data Transmitted to AWS

The App makes direct HTTPS requests to AWS APIs using your credentials. These requests are signed with SigV4 and sent over TLS 1.3. The data exchanged is between your device and AWS — we have no visibility into it.

5. AI Features (Bedrock)

If you use AI-powered features (Pro tier), the App sends metric summaries to your own AWS Bedrock endpoint in your AWS account. No data is sent to Kairo Apps servers or any third-party AI provider.

6. Push Notifications

If you enable push notifications, your device token is registered with Apple Push Notification service (APNs). We may store device tokens on our backend infrastructure solely for delivering alarm notifications. No AWS data is included in notification payloads beyond alarm names and states.

7. Contact Form & Chat Widget

Messages sent via the website contact form or chat widget are processed by Formspree (a third-party form handler) and forwarded to our email. We retain these messages only for support purposes.

8. Subscriptions

Subscriptions are managed entirely by Apple through the App Store. We do not process payments directly and have no access to your payment information. Apple's privacy policy governs transaction data.

9. Children

The App is not directed at children under 13. We do not knowingly collect information from children.

10. Data Retention

• Local credentials: until you delete the profile or uninstall the app.
• Audit log: 90 days, then auto-purged.
• Cached data: 24 hours.
• Support messages: retained as long as needed to resolve your inquiry.

11. Your Rights

Since we don't collect personal data, there is generally nothing to request deletion of. However, under GDPR you have the right to:

• Request confirmation of what data (if any) we hold about you.
• Request deletion of support correspondence.
• Lodge a complaint with your local data protection authority.

Contact us at [email protected] for any privacy-related requests.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance.

13. Contact

Kairo Apps
Atlas Tower, Al. Jerozolimskie 123A
02-017 Warsaw, Poland
[email protected]