Privacy Policy

1. Our Privacy Commitment

PocketAI supports on-device AI and paired-device AI. On-device inference processes your prompts and files on your device. A paired computer may use an external AI provider selected by the user; that provider receives the content and context needed to answer the request. Do not assume every PocketAI feature is offline or local.

This policy explains account, remote-access and payment data, and the data shared by external services. Direct cloud AI requests from the iPhone or iPad remain disabled. Remote Chat and Agents on iOS can initiate work on a paired PocketAI computer. Before a new remote request is sent, the updated iOS app explains the content and recipients and asks for permission. Earlier build 1.5.5 (63) did not ask at that point; it is being replaced. Existing provider keys and chats are preserved. Optional phone web search sends queries to DuckDuckGo after a separate disclosure and permission. Features and controls vary by version and platform.

2. Local Processing and Optional Sharing

With on-device inference and external tools disabled, the following content is processed locally rather than sent to an AI provider:

• Your conversations and chat history
• Your prompts and inputs to AI models
• AI-generated text, images, videos, and code
• Files and documents you process with AI models
• AI model files stored on your device
• Your usage patterns and model preferences

Paired remote access transports content between your devices using end-to-end encryption; relay infrastructure routes encrypted traffic. A paired desktop can itself use a cloud AI provider. Encryption between your devices does not prevent that selected provider from receiving the plaintext context needed for inference. Optional web search also sends queries outside your device.

3. Data We Collect

When you create an account or use cloud features, we collect the following:

Account Information

• Email address
• Hashed password (or OAuth tokens if using social login)
• Account creation date
• Subscription status and tier

Device Information (Remote Access Only)

• Device names you assign (e.g., "My Laptop")
• Subdomain assignments (e.g., my-laptop.pocketaihub.com)
• Online/offline status (heartbeat)
• PocketAI Relay Remote-action counts (for allowance enforcement)
• End-to-end encryption public keys

Payment Information

• Payment details are processed directly by our payment providers (Stripe, PayPal, or cryptocurrency processors) and are not stored on our servers
• We store only transaction identifiers and subscription status

Technical Data

• IP address (for rate limiting and security, not stored long-term)
• Browser/app version information (for compatibility)

4. How We Use Your Data

We use the data we collect to:

• Provide and maintain your account
• Process payments and manage subscriptions
• Route remote access connections between your devices
• Enforce usage limits for your subscription tier
• Send transactional emails (account verification, password resets)
• Respond to support requests
• Prevent fraud and abuse

We do not use your data for advertising, profiling, or selling to third parties. We do not use your data to train AI models.

5. Third-Party Services

Depending on the platform and features you choose, the following recipients may process data. The iOS app sends a remote request over an encrypted connection to the paired computer you selected; the computer can then send data to its configured AI provider. The data can include your typed or dictated prompt, recent conversation history, attached text and images, and relevant memories or workspace context. Agent tools can add file contents, browser content, terminal output and screenshots. The provider also receives generated responses and network/account information from the computer. This is used to answer your request or carry out your agent task. PocketAI does not use that content for advertising or AI training.

• Stripe — Payment processing (card payments, Apple Pay, Google Pay)
• PayPal — Payment processing
• Cloudflare — DNS and infrastructure
• Google, GitHub, Apple — OAuth authentication (if you choose social login)
• Apple App Store / Google Play Store / Microsoft Store — In-app purchase processing
• OpenAI direct API — Requests directly from the current iOS app are disabled, including with saved keys or permissions. A paired computer, other platforms or older iOS versions may use api.openai.com. API content is not used for training unless your organization opts in. Abuse-monitoring logs may include prompts and responses and are normally retained for up to 30 days, with legal and safety exceptions. Your API organization's data controls also apply.
• Anthropic direct API — Requests directly from the current iOS app are disabled, including with saved keys or permissions. A paired computer, other platforms or older iOS versions may use api.anthropic.com. Commercial API content is not used for training by default; explicit data-sharing programs and feedback are exceptions. Standard API inputs and outputs are deleted within 30 days, with contractual, legal and safety exceptions that can retain data longer. Your API account's commercial terms and data controls also apply.
• Desktop subscription and CLI accounts — The API descriptions above do not describe every desktop account. A desktop connection can use a subscription account instead of an API key, and its product terms, privacy settings and deletion controls apply. For example, Anthropic's consumer terms cover Claude Free, Pro and Max accounts used with Claude Code. If model improvement is enabled, Anthropic may retain de-identified chats or coding sessions for up to five years; safety and legal exceptions also apply. PocketAI does not enable, disable or verify these provider-account settings.
• Anysphere (Cursor) — A paired desktop using Cursor sends requests through Cursor's backend, including when you supply your own API key. Cursor can forward context to its model providers. Cursor's Privacy Mode changes training and retention rules; with it disabled, code and prompts may be used to improve or train models. Safety-related retention and specifically designated non-zero-retention models can be exceptions even with Privacy Mode enabled. Review the selected account and model settings before allowing sharing.
• Other AI services and gateways — Direct phone requests to Google Gemini, xAI, Alibaba Cloud (Qwen), DeepSeek, Nous Research, OpenCode, OpenRouter, Venice AI, iTokens.io and Empero are disabled in the current iOS app. Saved keys and chats are preserved. A paired computer, other platforms or older iOS versions may offer these integrations. Gateways can forward content to downstream model hosts; their account settings and policies apply.
• Paired-desktop AI services — Remote Chat and Agents can send content to your user-owned, paired PocketAI computer, which executes work using the provider and tools you configured there. Before sending, the updated iOS app shows the computer and, for an external AI connection, the identified provider, model when reported, and categories of data that may be sent. You can Allow or Don’t Allow. Approval is remembered only for the disclosed scope; a changed disclosure asks again. The app rechecks permission and the desktop's reported configuration before dispatch. If it cannot identify the provider, it blocks the new request. You can revoke saved approvals in Settings → AI Data Sharing. Providers may include OpenAI, Anthropic, Google, Anysphere (Cursor), Nous Research, OpenRouter and other named services shown in the permission sheet. A gateway can forward content to a downstream model host under its own terms. Provider credentials originate with those services, not PocketAI. Device-to-device encryption does not hide task context from the selected provider after the computer forwards it.
• DuckDuckGo — Optional web search sends the search query (which can contain information derived from your prompt) and network request information to DuckDuckGo. Results become context for the active model. The search tool does not send the full conversation to DuckDuckGo.
• Apple speech services — If you choose Apple speech recognition, microphone and speech permissions apply. Recognition may use Apple services when on-device recognition is unavailable. Locally downloaded speech models use the on-device path instead.

The account, payment and relay processors named above use data for their stated roles under their published policies and any applicable agreements with us. User-configured AI providers are independent services with their own privacy, retention, training and routing terms; we do not claim their terms are identical to PocketAI’s local-processing protections. Review the provider named in the permission sheet before allowing a remote request. Revoking permission prevents future requests from this phone but cannot recall content already sent, stop a running desktop task, or change provider settings on your computer. Use the remote task controls to stop work. You may contact the provider to request deletion of provider-held data. Optional phone web search has its own DuckDuckGo permission; declining either permission leaves on-device AI available.

External-service references (including providers used by paired computers): OpenAI privacy policy, OpenAI API data controls, Anthropic API retention, Claude consumer and Claude Code retention, Anthropic training policy, Cursor data use and privacy settings, and DuckDuckGo privacy policy.

6. Cookies

We use minimal cookies for essential functionality:

• Session cookies — To maintain your login state
• Affiliate tracking cookies — 30-day cookies to attribute referrals (only if you arrived via an affiliate link)

We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

7. Data Retention

We retain account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax purposes).

Local chat history and generated files remain on the device where they are stored, subject to backups you control. Deleting a local copy does not delete copies on paired devices or at a cloud provider. External providers may retain requests, responses or logs under their own policies and account settings. PocketAI cannot delete those provider-held copies on your behalf.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Passwords are hashed and never stored in plaintext
• Remote access uses end-to-end encryption
• HTTPS for all server communication
• Rate limiting and CSRF protection
• JWT-based authentication with secure token handling

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and personal data
• Portability — Request your data in a portable format
• Objection — Object to certain processing of your data

To exercise any of these rights, contact us through our support page.

10. Children's Privacy

The iOS app is intended for adults aged 18 and over because unrestricted AI models can generate mature content. It is not a children’s service. We do not knowingly collect personal data from children under 13; if we learn that we have, we will take steps to delete it promptly.

11. International Data Transfers

If you are accessing the Service from outside the United States, your account data may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.

12. GDPR (European Users)

If you are in the European Economic Area (EEA), our legal basis for processing your data is:

• Contract performance — To provide the Service you signed up for
• Legitimate interest — To prevent fraud, enforce our terms, and improve the Service
• Consent — For optional features such as external AI data sharing, web search and affiliate cookie tracking

You have the right to lodge a complaint with your local data protection authority.

13. CCPA (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal data we collect and how it is used
• The right to request deletion of your personal data
• The right to opt out of the sale of personal data

We do not sell personal data. We do not share personal data for cross-context behavioral advertising.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact

If you have questions about this Privacy Policy or your data, please contact us through our support page.