Privacy Policy

Overview

LEO is an infrastructure command center built and distributed by SHYGUY LLC. It combines cloud instance monitoring, Docker container management, and network diagnostics in one app for iPhone, iPad and Android.

The short version: LEO has no account, no analytics and no ads, SHYGUY LLC runs no server for it, and we do not sell any data. Your credentials, hosts and history stay on your device. The one exception is on Android, and only if you choose to enter an affiliate code — see “LEO for Android” below.

Data We Do Not Collect

• —No analytics or usage tracking
• —No crash reporting sent to third parties
• —No advertising identifiers
• —No account registration or login
• —No data shared with third parties — except, on Android, the affiliate-code details described below, and only if you enter a code

Data Stored Locally on Your Device

LEO stores the following data locally — on iPhone and iPad in SwiftData and the Keychain, on Android in the app's private storage. This data never leaves your device unless you explicitly export it.

• —Cloud provider credentials (AWS access keys, Azure app registrations, GCP service account keys)
• —Docker host configurations — hostnames, ports, and TLS settings
• —Saved hosts and IP addresses in the address book
• —Tool history — inputs and results from network diagnostics you run
• —Health check results (the trend is kept only while the app is open)

On iPhone and iPad, cloud credentials are stored in the iOS Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly protection, meaning they are inaccessible when the device is locked and cannot be transferred to another device. On Android they are encrypted (AES-256-GCM) with a key held in the Android Keystore, which never leaves the phone. Credentials are used only to sign or authorize requests to that provider, on your device.

Network Access

LEO makes network requests in three contexts, all initiated by you:

• —Cloud APIs — LEO connects to AWS, Azure, and GCP APIs using credentials you provide to fetch instance status and metadata.
• —Docker API — LEO connects to Docker hosts you configure to manage containers and images over HTTP or TLS.
• —Network diagnostics — Ping, port scan, SSL check, DNS lookup, and traceroute requests are made directly from your device to the target host you specify. WHOIS lookups go to rdap.org; DNS queries go to the resolvers you choose.

No traffic is proxied through SHYGUY LLC servers. All requests go directly from your device to the target service or host.

Local Network Access

On iPhone and iPad, LEO requests local network permission to perform diagnostics on devices within your local network and to connect to Docker hosts running on private IP addresses. Android needs no extra permission for this. The access is used only when you run a tool or connect to a host — LEO does not perform background network discovery.

LEO for Android

Everything above applies to the Android app. In addition:

• —Permissions: internet, network state, and the one Google Play Billing needs. No location, contacts, camera or storage permission.
• —LEO for Android is a free download; “Unlock LEO” is a one-time in-app purchase through Google Play. Google handles the payment — we never see your payment details — and the app only asks Google Play whether your account owns the unlock.
• —Android's cloud backup is turned off for the app, so your credentials, hosts and history are not copied to Google Drive.

Affiliate codes (Insert Affiliate)

Creators and partners may share a code for LEO. Codes are handled by Insert Affiliate (insertaffiliate.com/privacy-policy), whose software is built into the Android app so that a creator can be credited when someone they referred buys Unlock LEO. What it sends to Insert Affiliate's servers:

• —Once, on first launch: a notice that the app started, containing only our company identifier — nothing about you or your device.
• —Only if you enter a code: the code you typed, to check that it belongs to an affiliate, and a short device identifier (the first six characters of Android's per-app ID, or a random value) that ties the code to this install.
• —Only if you have entered a code and then buy Unlock LEO: the Google Play purchase token and the time, so Insert Affiliate can match your purchase with Google's purchase notification and credit the creator.

No name, email, location, cloud credentials, hosts or tool history are sent. If you never enter a code, nothing beyond the one-time start notice is sent. The code is kept on the device so a later purchase can be credited.

To have this deleted, use the form at shyguy.studio/delete-account. We ask Insert Affiliate to delete what it holds for you and confirm by email within 30 days. Uninstalling LEO deletes everything stored on the phone.

Children's Privacy

LEO is not directed at children under 13 and does not knowingly collect any information from children. LEO collects no personal data from any user beyond the optional affiliate-code details above.

Changes to This Policy

If this policy changes materially, the effective date above will be updated and a note will be posted on shyguy.studio.

Contact

Questions about this policy? hello@shyguy.studio