If it's in the cloud the NSA likely knows about it. Probably 100% certain if the cloud server is physically in the US, or if it is a US company. If it is a 'secure non-US' server (if that even exists) then they will see the data when it's downloaded.
Perhaps the US constitution protects US citizens resident in the US, but others are not protected.