Privacy Policy

Overview

LEO is an infrastructure command center built and distributed by Shy Guy LLC. It combines cloud instance monitoring, Docker container management, and network diagnostics in a single iOS application.

The short version: LEO does not collect, transmit, or sell any personal data. Everything stays on your device.

Data We Do Not Collect

• —No analytics or usage tracking
• —No crash reporting sent to third parties
• —No advertising identifiers
• —No account registration or login
• —No data shared with third parties

Data Stored Locally on Your Device

LEO stores the following data locally using iOS-managed storage (SwiftData and Keychain). This data never leaves your device unless you explicitly export it.

• —Cloud provider credentials (AWS Access Keys, Azure Client IDs, GCP Service Accounts) stored in the iOS Keychain
• —Docker host configurations — hostnames, ports, and TLS settings
• —Saved hosts and IP addresses in the address book
• —Tool history — inputs and results from network diagnostics you run
• —Health check results and trend data

Sensitive credentials (cloud provider keys, Docker TLS certificates) are stored exclusively in the iOS Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly protection, meaning they are inaccessible when the device is locked and cannot be transferred to another device.

Network Access

LEO makes network requests in three contexts, all initiated by you:

• —Cloud APIs — LEO connects to AWS, Azure, and GCP APIs using credentials you provide to fetch instance status and metadata.
• —Docker API — LEO connects to Docker hosts you configure to manage containers and images over HTTP or TLS.
• —Network diagnostics — Ping, port scan, SSL check, DNS lookup, and traceroute requests are made directly from your device to the target host you specify.

No traffic is proxied through Shy Guy LLC servers. All requests go directly from your device to the target service or host.

Local Network Access

LEO requests local network permission to perform diagnostics on devices within your local network and to connect to Docker hosts running on private IP addresses. This access is used only when you initiate a scan or connect to a host — LEO does not perform background network discovery.

Children's Privacy

LEO is not directed at children under 13 and does not knowingly collect any information from children. As LEO collects no personal data from any user, no special handling applies.

Changes to This Policy

If this policy changes materially, the effective date above will be updated and a note will be posted on shyguy.studio.

Contact

Questions about this policy? hello@shyguy.studio