Privacy Policy

Summary

Loci is built around local processing. Your chats, prompts, replies, files, audio, images, memories, calendar data, and reminders are not collected by Loci.

All AI runs on your device. Loci does not use, integrate with, or send your data to any third-party AI service (for example, OpenAI, Anthropic, or Google). There is no cloud model and no remote inference server: your prompts and conversations are processed on your device and are never transmitted to us or to anyone else for AI processing.

If you opt out of anonymous diagnostics, Loci does not collect diagnostic data from the app. If you opt in, Loci collects only anonymous diagnostic and performance data to help us improve speed, reliability, model loading, downloads, and crash recovery. We never collect prompts, replies, or personal information through diagnostics.

When Diagnostics Are Off

Loci does not require an account, and diagnostics are optional. When anonymous diagnostics are turned off, the app does not send diagnostic events to us.

When Diagnostics Are On

Anonymous diagnostics may include technical information such as app version, operating system, device class (for example, a device model name like “iPhone 15 Pro,” never a name you have given your device), a randomly generated anonymous install identifier, model/runtime state, download and model-load timing, response-speed measurements, crash or hang signals, error categories, and coarse usage counts. The install identifier is not linked to your name, email, or any account, and Loci has no account system.

Anonymous diagnostics are sent to Loci’s own backend, which is hosted on Supabase (our database and hosting provider). They are used only to understand what is slow, what breaks, and how to make Loci faster and more reliable. Diagnostics are not shared with advertising networks or data brokers, are not sent to any third-party AI service, and are not used for ads, tracking, or profiling.

What Diagnostics Never Include

• Prompts, replies, conversation text, or conversation titles
• Files, images, audio, memories, calendar data, reminders, or contacts
• Names, email addresses, payment information, or other personal information
• API keys, local secrets, or the contents of anything you ask Loci to process

Optional Online Features

Most Loci features run on your device. A few optional features need an internet connection to work:

• Web search. When web search is enabled and the assistant looks something up, only that specific search query is sent directly from your device to DuckDuckGo to retrieve results. Your conversation, files, identity, and device information are not included, the request does not pass through a Loci server, and Loci does not store your search text. You can turn web search off in Settings to keep Loci fully offline.
• Model downloads. When you choose to download a model, its weight files are fetched from public repositories on Hugging Face. This is a standard file download and includes no prompts or personal data.

Website

lociai.app does not use ad pixels, analytics scripts, third-party trackers, or tracking cookies. Our hosting provider may process basic server logs, such as IP address, browser type, requested page, and time of request, to deliver and secure the site.

Support

If you contact us for support, we receive the information you choose to send. Support messages are used only to respond to your request and troubleshoot the issue.

Sharing

We do not sell personal information, and we do not share your data with any third-party AI service. Anonymous diagnostics and limited operational data may be processed by the service providers that help us operate Loci: Supabase (backend and diagnostics hosting), Apple (app distribution and, where applicable, in-app purchases), Hugging Face (model file downloads you request), and DuckDuckGo (web-search queries you initiate). Each processes only the limited data described above.

Retention

Because prompts, replies, and personal content are not uploaded to us through diagnostics, we do not retain that content on our servers. Anonymous diagnostic records, hosting logs, and support messages may be kept only as long as reasonably needed for operations, reliability, security, support, or legal compliance.

Your Choices

You can turn anonymous diagnostics off in Loci. You can also avoid optional online features, such as web search, if you do not want an online lookup. You can manage app permissions through iOS, iPadOS, macOS, and App Store settings where available.

Children

Loci is not directed to children under 13.

Changes

We may update this policy as Loci changes. The latest version will be posted on this page.

Contact

For privacy questions, use the developer contact or support link provided on Loci's App Store listing, or visit Loci Support.