CloudLink Communications Limited Last updated: 21 October 2026
This policy explains how CloudLink Communications Limited ("CloudLink", "we", "us") handles personal information in our Alarms app for iPhone and Android (published as "CloudLink Alarms"). It sits alongside our Terms of Trade, which cover the rest of your CloudLink services. We follow the New Zealand Privacy Act 2020 and its Information Privacy Principles.
The short version
The app is for existing CloudLink alarm monitoring customers. It shows you the alarm information we already hold to monitor your site, and lets you act on it.
We collect only what the app needs to work: your sign-in, your phone's push notification address and name, and what you do in the app.
The app has no advertising, no analytics and no tracking. We don't sell your information or share it for marketing.
Your information is stored on CloudLink's own servers in New Zealand.
You can ask to see or correct your information at any time by emailing This email address is being protected from spambots. You need JavaScript enabled to view it..
Who we are
CloudLink Communications Limited, Palmerston North, New Zealand. Phone 0508 CLOUD 4U · Email This email address is being protected from spambots. You need JavaScript enabled to view it. · cloudlink.nz
Our privacy officer is the Director, who you can reach at This email address is being protected from spambots. You need JavaScript enabled to view it..
What the app collects, and why
Signing in
Your account number and password. You type these in to sign in. They are sent to our server over an encrypted connection (HTTPS) and checked against your CloudLink portal login. The app never stores your password on your phone. On our server, passwords are stored only as a one-way hash.
"Remember me". If you tick it, the app saves your account number (not your password) in your phone's secure storage (the iOS Keychain or Android Keystore) so you don't have to type it again.
Session token. When you sign in, our server issues a random session token. The app keeps it in your phone's secure storage so you stay signed in. It's removed from your phone and our server when you tap Log out, and it also stops working after 12 months without use.
Failed sign-in attempts. To protect your account from password guessing, our server briefly records failed attempts against the account and the network (IP) address they came from, and blocks sign-in for 15 minutes after too many failures.
Push notifications
Push token. If you allow notifications and register your phone, the app gets a push token from Apple (or Google) through Expo, our notification service, and sends it to our server. We use it only to send alarm notifications to that phone.
Phone name and model. We store the name you give your phone in the app (for example "Adam's iPhone") and its model (for example "iPhone 15"). This lets you and us tell your phones apart in the event history and notification log. You can change the name in the app's Settings at any time, and earlier log entries are updated to match.
Using the app
Network (IP) address. When you switch maintenance mode on or off, we record the public IP address of your phone's internet connection, the phone's name and the time in your event history. This gives you an audit trail of who changed what. Our web servers also keep standard access logs (IP address, time and page requested) for security and troubleshooting.
Your responses and notes. When you acknowledge or ignore an alarm, request a guard, or add a note, we save what you chose, any note you wrote, and the time. Notes stay in your event history. They're not sent to anyone else, except that notes you add when you request a guard are read out to the guard dispatch service as instructions.
Guard requests. When you tap Send guard, our phone system calls the guard dispatch line and reads out your site address, your account name, your contact phone number and any instructions you added. We keep a record of the request and the call.
Zones, users and notification contacts. If you add or edit zone names, panel user names, or the email addresses and phone numbers to be notified about alarms, we save those changes to your monitoring setup. Only add people's details if they've agreed to be contacted about your alarm.
Maintenance mode. While it's on, alarm signals are still received and logged, but notifications and calls aren't sent. We save when it was switched on and off and by which phone.
Information we already hold for monitoring
The app shows information CloudLink already holds to monitor your alarm, under your monitoring agreement. This includes your account name, email and phone number, your site address, your alarm panel type, the signals your panel sends us (for example alarms, arming and disarming, faults and test signals, including the panel's network address), your zone and user names, your notification contacts, and the history of notifications, calls and responses for each event. The app doesn't collect this. It just shows it to you.
What we don't collect
The app doesn't access your location, contacts, photos, camera, microphone or files. It has no advertising, analytics, crash-reporting or tracking software, and we don't track you across other apps or websites. We don't use your information for advertising, and we never sell it.
What's stored on your phone
Besides the secure session token and (if you chose "Remember me") your account number, the app keeps a few small settings in its own storage: your phone's name, whether the phone is registered for notifications, and which notification it last opened. These are removed when you delete the app.
Who we share information with
We share information only as needed to provide the service:
Expo (650 Industries, Inc., USA), Apple and Google, to deliver push notifications. A notification contains the alarm details shown on your lock screen, such as the event, zone and site. These providers handle it under their own privacy policies.
Our phone carrier, which connects the alarm and guard calls our own phone system makes to your contacts and to the guard dispatch service.
The guard dispatch service, when you request a guard. They receive the details read out in the call (see above).
Email. Alarm emails are sent by CloudLink's own mail servers to the addresses on your notification list.
Others, when required by law, or where it's needed to prevent or lessen a serious threat to someone's life, health or safety (for example passing details to emergency services in a real emergency).
Expo, Apple and Google may process push notification data outside New Zealand, including in the United States. We use these providers because they're the only way to send notifications to phones, and they're subject to privacy and security obligations comparable to the Privacy Act.
How we keep it safe
All traffic between the app and our servers is encrypted with HTTPS. Your session token is kept in your phone's secure storage. Passwords are stored only as one-way hashes. Our servers are in New Zealand, are run by CloudLink, and are protected by firewalls, restricted administrator access and sign-in rate limiting. Each account can only see its own information.
How long we keep it
Session tokens and push tokens: until you log out, or after 12 months without use.
Alarm events, notification history, responses and notes: for as long as your monitoring service is active, and then for up to 2 years so we can answer questions or insurance claims about past events. After that we delete or anonymise them.
Billing records: for 7 years, as required by New Zealand tax law.
You can ask us to delete app data you no longer want kept (for example old notes or an old phone) by emailing This email address is being protected from spambots. You need JavaScript enabled to view it.. We may need to keep some records while your monitoring service is active, or where the law requires it.
Your rights
Under the Privacy Act 2020 you can ask to see the personal information we hold about you, and ask us to correct it. Email This email address is being protected from spambots. You need JavaScript enabled to view it. or call 0508 CLOUD 4U. We'll respond within 20 working days, and we don't charge for this. You can correct many details yourself in the app or at my.cloudlink.nz.
To stop using the app, tap Log out and delete it. To close your CloudLink account or monitoring service, contact us. Accounts are set up by CloudLink and can't be created in the app.
Complaints
If you have a concern about how we've handled your information, please contact us first at This email address is being protected from spambots. You need JavaScript enabled to view it. so we can put it right. If you're not happy with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.
Children
The app is for CloudLink account holders and people they authorise. It isn't directed at children.
Changes to this policy
We'll update this page if the app or how we handle information changes, and change the date at the top. If a change is significant, we'll tell you in the app or by email.
