The Unifi range is quite definitely optional cloud. Don't turn it on (and don't use a cloud-based controller!), and it won't have any mechanism for control.

You can even use the mobile apps over direct connection, with local auth and no cloudy relay required.