1. A method of managing personal data associated with a user, the method performed by a cloud storage system comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the system to perform the method, the method comprising: receiving, at an interface of the cloud storage system from a plurality of remote systems associated with the user, personal data related to the user; receiving, at the interface of the cloud storage system from a system associated with an application service provider, an application for execution by the cloud storage system; receiving, at the interface of the cloud storage system from at least one remote system of the plurality of remote systems, policy data generated by the user associated with the received personal data, the policy data identifying the application as being permitted to use the received personal data; receiving, at the interface, an application request from the user, the application request comprising a request for a response to be generated by the application executing on the cloud storage system based on the received personal data; determining that the request is permitted based on a determination that the policy data associated with the received personal data identifies the application as being permitted to use the received personal data; generating a response to the application request using the application based on the received personal data; and transmitting, from the interface, the response to the user.