Privacy policy

Last updated: November 14, 2026

This policy covers Cloud Butler, the hosted connector that lets an AI app of your choice read and act on your Apple services, the Cloud Butler apps for iPhone, iPad and Mac when they are released, and this website (together, "Cloud Butler"). Cloud Butler is provided by CogNoodle, LLC, a Wyoming limited liability company ("CogNoodle", "we", "us").

The short version

• Cloud Butler is a pipe between your Apple account and the AI app you pick. It fetches what your agent asks for, when it asks, and hands it to that AI app.
• We don't keep copies of your mail, calendar events or contacts.
• We store what we need to keep you connected: your Apple sign-in details, encrypted, and a few records about your connection and devices.
• Whatever Cloud Butler returns goes to the AI app you connected, and that company's privacy policy then applies to it.
• We never sell your data, never use it for advertising and never use it to train AI models.

1. What we collect

When you connect Cloud Butler

• Apple sign-in details: your Apple ID (an email address), your iCloud Mail address and mail login if they differ, and the Apple app-specific password you create for Cloud Butler. We check them with Apple when you connect.
• Optional web sign-in (off by default): only if the service operator switches on iCloud Drive, Reminders, Find My, Notes and Photos and you choose to use them, we also receive your Apple ID password and a two-factor code. We store your Apple ID password, encrypted, for as long as the connection exists, because Cloud Butler needs it to sign in to those iCloud services. We use the two-factor code once and don't keep it, and we keep the resulting web session from Apple.
• Connection details: which AI app you connected (its name, client identifier and return address), the permissions (scopes) you granted, and hashed copies of the sign-in tokens issued to that app.
• An internal user ID: a one-way keyed code derived from your Apple ID, so our records don't have to contain your Apple ID in readable form.

When your agent uses Cloud Butler

• Your Apple content: mail messages and attachments, calendar events, contacts and, if enabled, files, reminders, notes, photos and device locations, as each request needs. Cloud Butler reads or writes them on your behalf at the moment your agent asks and does not keep a copy.
• Files your agent asks Cloud Butler to attach to an email, from the chat, from your iCloud Drive or from a public web link. They are fetched for that one message and not kept.
• Usage records: when metering is switched on, one record per tool call with your internal user ID, the AI app's client identifier, the tool's name, whether it succeeded, and how long it took. Usage records never contain what you asked, what was sent or anything read from your account.

When you use the Cloud Butler apps (when released)

• Paired devices: each device's name, type, what it can do (for example HomeKit or Shortcuts), whether it is online and which is your home hub.
• Device actions: for each action your agent sends to a device (for example "turn on the kitchen lights" or "run this shortcut"), the request, the result or error, which device ran it and when. These power the activity log you can check at any time. They are stored encrypted.

Subscription and support

• Plan: whether you are on Free or Pro, when Pro ends and where it was bought. When checkout opens, payments are handled by Stripe; we receive your subscription status and a customer reference, never your full card number.
• Messages you send us, such as support emails.

Technical data

• Like any web service, our hosting provider records technical request data (such as IP address, time, the address requested and the response code) to keep the service running and secure.
• This website uses no cookies, no analytics and no advertising trackers. Its fonts load from Google Fonts, which receives your IP address and browser details when a page loads.

2. How we use it

• To run Cloud Butler: connect to Apple on your behalf, do what your agent asks, and show you approvals and activity.
• To keep it secure: verify sign-ins, prevent abuse, enforce limits and investigate problems.
• To run your plan: decide which tools your plan includes and, when billing opens, manage your subscription.
• To support you and tell you about important changes to Cloud Butler.
• To understand overall use (for example, how often each tool is called) using usage records that contain no content.

We don't read your content except to perform the request you made, we don't sell personal information, we don't use it for advertising or profiling, and we don't use your content to train AI models.

3. How and where it is stored

• Cloud Butler runs on Cloudflare's network. Your connection records are stored in Cloudflare storage, which may be located in the United States or other countries where Cloudflare operates.
• Your app-specific password, your Apple ID password if you use the optional web sign-in, and your other Apple sign-in details are encrypted with AES-256 before storage and are never sent to your AI app.
• The optional web session and device action records are also stored encrypted.
• All traffic between your AI app, Cloud Butler and Apple is encrypted in transit.
• Each person's records are kept separate, and access by our team is limited to what is needed to operate the service.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as the law requires.

4. Who we share it with

• The AI app you choose. Cloud Butler exists to pass your Apple content to the AI app you connect, such as Claude (Anthropic), ChatGPT (OpenAI) or another MCP client, when your agent asks for it. Once delivered, that content is handled under that provider's own terms and privacy policy, not ours. Please review them, and only connect AI apps you trust.
• Apple. We send your requests and your sign-in details to Apple's iCloud servers to perform them.
• Service providers who process data for us under contract: Cloudflare (hosting, storage and network) and, when checkout opens, Stripe (payments).
• The recipients you choose. When your agent sends an email at your request, it goes to the people you addressed.
• Legal reasons. If the law requires it, or to protect the rights, safety or property of our users, the public or CogNoodle.
• Business change. If CogNoodle is involved in a merger, acquisition or sale of assets, under this policy's protections.

We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising.

5. How long we keep it

Technical session records created by older versions of the connector may remain until they are cleaned up; we delete them on request.

6. Your choices and rights

• Stop access at any time by deleting the Cloud Butler app-specific password at account.apple.com, and remove the connector from your AI app. How to revoke access.
• Choose what to connect. Mail, Calendar and Contacts use the app-specific password; the optional services need a separate sign-in you can decline.
• Ask us to tell you what we hold about you, correct it, delete it or send you a copy, by emailing the address below. We will answer within 30 days and will not treat you differently for asking.
• Depending on where you live (for example California, the European Economic Area or the United Kingdom), you may have further rights, including to object or to complain to your local data protection authority.

7. Children

Cloud Butler is not meant for children under 13 (or the minimum age in your country), and we don't knowingly collect their information. If you think a child has used Cloud Butler, contact us and we will delete it.

8. Changes to this policy

We will post any change here with a new date. If a change materially affects how we use information we already hold, we will tell you before it takes effect.

9. Contact

CogNoodle, LLC, Wyoming, United States.
Privacy questions and requests: privacy@cognoodle.ai
Everything else: Support