// PRIVACY ◈ COMMITMENTS, NOT POLICIES
We can't leak
what we never receive.
ゼロ・テレメトリー
This page is our privacy policy, written to be read. Short version: the app collects nothing, sends us nothing, and warns you first before any setting that would change that. Everything below is the same promise in detail.
No usage tracking
Off by default. There is no analytics pipeline to opt out of, it was never built.
◈ VERIFIED BY DESIGN
Questions stay home
Everything you ask is processed on your device or your own computer. We receive nothing, there is no server to receive it.
◈ VERIFIED BY DESIGN
Clear warnings
Any setting that reduces privacy, like plugging in a paid AI account, shows an explicit consent screen first. Silence never means yes.
◈ VERIFIED BY DESIGN
The signup lists
The one exception by your own action: if you type your email into a signup form and press SIGN UP, that address goes to Google Forms and lands in a sheet we control. Nothing else on this site transmits anything, ever.
◈ CONSENT ONLY
Open to audit
The code that pairs your devices and moves data between them is open for anyone to inspect. Trust the math, then verify the math.
◈ VERIFIED BY DESIGN
⬢ NOTE // When you plug in your own paid AI account, those requests go to that provider under that provider's terms. The hub tells you exactly when that's about to happen, every time, before it happens.
// POCKET AI HUB ◈ ON-DEVICE BY DEFAULT
Zero telemetry
Pocket AI Hub has no analytics, no crash reporters, no accounts, no sync. The Play data-safety form reads "No data collected", because there is nothing to collect.
◈ DATA NOT COLLECTED
On-device by default
Chats, settings, benchmarks, and model files live on your phone. Inference runs locally (llama.cpp). Models download over HTTPS from Hugging Face, that download is the only traffic a stock install ever makes.
◈ VERIFIED BY DESIGN
Pairing stays on your LAN
If you pair with the hubd daemon on your own computer, chat relay and agent-supervision data move over that one TLS link, pinned to the host certificate fingerprint you visually confirm. LAN only, nothing is relayed through us, because there is no "us" server.
◈ TLS PINNED · TOFU
Delete means delete
Long-press any conversation to delete it, on the phone and on the paired host. No server-side copy exists, so no deletion request is ever needed. If you still have one, it is answered by the button, not by us.
◈ VERIFIED BY DESIGN
⬢ CONTACT // Questions about this policy: setunlabs@gmail.com.