Privacy AI · Privacy Policy Privacy Policy for Privacy AI

Last updated: November 3, 2026

This Privacy Policy (this "Policy") explains how AcmeUp Inc. ("AcmeUp", "we", "our", or "us") collects, uses, discloses, and safeguards your information when you use our application Privacy AI, as well as when you interact with us.

We encourage you to read this Policy carefully to understand our practices regarding your personal information. If you have any questions, you may contact us at support@acmeup.com.

Our Services

Privacy AI is a privacy-first AI app. It runs AI models on your device, and it can also connect to AI services and servers that you choose and configure yourself. It enables private, intelligent tasks, local automation, document processing, and interaction with external tools via the Model Context Protocol (MCP).

• On-device by default. Local models, Apple's on-device foundation model, on-device speech recognition, text-to-speech, voice cloning, text recognition (OCR) and on-device image generation process your data on your device. Nothing is sent anywhere for them. Voice cloning transcribes your recording on your device, with Whisper by default and Apple's on-device speech recognition as a fallback; only if you select Apple's speech recognition service as your transcription engine may Apple's servers process the audio (see "Other Services You Connect").
• Cloud AI only when you choose it. Your content goes to a cloud AI service only when you use a service you added and selected. It goes directly from your device to that service (see "Third-Party AI Services").
• No AcmeUp server for your content. AcmeUp has no user accounts and runs no server that receives your chats, files, voice or other content. The only content we receive is feedback you choose to send us. We do not operate proxy servers or relay traffic for AI services.

Information We Collect

Usage analytics (Google Analytics for Firebase)

Collected only if Usage analytics is on. If it is on, the Firebase SDK in the app sends Google:

• App events, such as the app being opened, the screens and features used, session length and total usage time, the name of the AI model a chat was created with, your answer to the rating prompt, and subscription events (the product bought, its price and currency, whether a subscription is active and when it expires). Events never contain your chats, prompts, files, voice, images, API keys or other content you create.
• The Firebase app-instance ID, a random identifier created by Firebase on your device. It is not your name, email address or phone number.
• Device and app information: device model, operating system version, app version and language, and your approximate location, down to city level, which Google derives from your IP address.

Nothing is sent to Google Firebase before you tap Done on the welcome screen. The welcome screen explains usage analytics and crash reports and lets you turn each off first; your choices take effect when you tap Done. You can change them at any time in Settings > System Settings > Privacy. When both switches are off, the Firebase SDK is not started; if you turn them off later, it stops collecting and unsent crash reports are deleted.

Google Analytics keeps user-level data for 14 months and event-level data for 2 months. Google signals are off, the analytics property is not linked to Google Ads, AdMob or BigQuery, ad personalization is off, and Privacy AI sends no user ID or user properties.

Crash reports (Firebase Crashlytics)

Collected only if Crash reports is on, which works with usage analytics on or off. If the app crashes, Firebase Crashlytics sends Google a crash report: the stack trace and exception, the time of the crash, the device model, CPU type, memory and free disk space, the operating system and app version, a Crashlytics installation ID and the Firebase installation ID. If usage analytics is also on, the report includes the app events recorded just before the crash. A crash report never contains your chats, files or prompts. A crash recorded while crash reports are off is deleted, never sent later. Firebase keeps crash reports for 90 days.

On Mac, Privacy AI sends no usage analytics and no crash reports.

Advertising identifier

On iPhone and iPad, Privacy AI shows Apple's tracking prompt only after you tap Done on the welcome screen and only while usage analytics is on, including when you turn usage analytics on later in Settings. It asks so that we can measure which advertising campaigns led people to install the app. The advertising identifier is read only if you tap Allow on that prompt and usage analytics is on, and it is used only to measure ad campaigns, never to personalize ads. If you tap Ask App Not to Track, or turn tracking off later in the system Settings, it is never read.

How Google protects this data

Google processes usage analytics and crash reports as our service provider under the Firebase Data Processing and Security Terms, which bind Google to process this data only on our instructions and to protect it with security measures, so that it receives at least the same protection as this Policy describes. The Google Privacy Policy also applies.

Information You Provide

Feedback: the in-app feedback form lets you choose how to send it.

• Direct Send sends your title, category, description, any screenshots you attach, your email address if you enter one (so we can reply), and basic device information (device type, OS version and app version) to AcmeUp's feedback service, which runs on Amazon Web Services (AWS Lambda and Amazon SES) and forwards it by email to our customer care mailbox. The feedback service keeps no copy of your message.
• Email opens your own email app with a message to customercare@acmeup.com, including the same device information, which you can see and edit before sending. We receive what you send, including your email address.
• X and Discord open those apps; their own privacy policies apply to what you send there.

If you report AI-generated content through the app (Feedback, "Report AI Content"), we receive what you write and, if you choose one, the model or provider you name as its source. Prompts for the app's own on-device image models pass through a content filter that runs entirely on your device; nothing is sent to us.

We also receive subscription status and purchase history as provided by Apple, to manage in-app purchases. On iPhone and iPad these subscription events are also sent to Google Analytics, if usage analytics is on. We do not process or store payment information.

Third-Party AI Services

Privacy AI can connect to cloud AI services that you add yourself: AI chat models (an AI company's API, an OpenAI-compatible server, or a server on your own network) and image, voice, music and video generation services. You choose and configure these services, not AcmeUp, and each service processes your data under its own terms and privacy policy. Their data retention and model training policies differ by provider, plan and model, and change over time, so we do not describe them here. Please review the policy of each service before you use it, including whether it offers zero data retention.

Your permission. Privacy AI tells you which service will receive your data (its name and address) and what will be sent, and asks for your permission:

• when you save a cloud AI model or a cloud media service's API key, unless you already allowed that service; and
• each time you choose a cloud AI model or media service in the model picker or the media provider picker, unless you turn this reminder off in Settings > System Settings > Privacy. Choosing a saved preset does not ask.

You can allow or deny each service at any time in Settings > System Settings > Privacy. A denied service receives nothing: Privacy AI does not send the request and tells you that nothing was sent. This applies to servers on your own network too.

What is sent. For an AI chat model: your messages and the chat history; the system prompt and any persona, memory or knowledge text the chat uses; files, images, audio or transcripts you attach or record; and the results of tools the model runs. For a media service: your prompt and generation settings, and images, audio or video you attach as a reference. The same applies to the content a feature processes with the model you chose, for example emails in the Email assistant, meeting recordings and transcripts, documents you scan or import, and text you type with the Privacy AI keyboard. Your API key for a service is sent only to that service, to authenticate you.

Who receives it. Only the service you selected for that chat or feature. Requests go directly from your device to that service. AcmeUp operates no proxy or relay and never receives, stores or sees this data. Privacy AI connects over encrypted HTTPS, except to a server of your own whose address uses plain HTTP, such as the local-server presets (Ollama, LM Studio and similar).

How your data is protected. These services are not AcmeUp's service providers. They act for you, under your own account and your own agreement with them, much like an email server you add to a mail app. AcmeUp has no agreement with them and cannot confirm that they protect your data as this Policy does. That is why Privacy AI shows the service's name and address and asks for your permission when you save or choose a service, and why a service you deny receives nothing. A service you set up in an earlier version, or that arrives by iCloud sync or a restored backup, is listed as Not reviewed in Settings > System Settings > Privacy and is used until you deny it there. Allow a service only if its privacy terms protect your data at least as well as this Policy does. If they do not, choose Don't Allow or deny it in Settings, or use an on-device model, which keeps your data on your device.

Apple Private Cloud Compute, if you use it, is Apple's service and processes requests under Apple's terms.

Other Services You Connect

Some built-in tools query public services directly from your device with only what the tool needs, for example a search term or, for the weather tool, your location (api.open-meteo.com); each service's own privacy policy applies. Other connections you set up yourself, such as MCP servers, web search providers, email accounts and Git repositories, receive what the feature you use needs, for example a search query, a web address, a tool's arguments, your email messages or the files of a knowledge base you sync. Content goes directly from your device to that service, and its own privacy policy applies. If you choose Apple speech recognition as your transcription engine, Apple may process the audio under Apple's terms when on-device recognition is not available for the language.

If you turn on the API gateway, other devices on your network can send requests to Privacy AI on this device. Each request is processed by the model it names, including a cloud service you allowed, and is logged on this device.

When using iCloud Sync, Apple's privacy policies apply. AcmeUp Inc. has no access to your iCloud data.

Google User Data (Google Drive)

Privacy AI Pro can connect to your Google Drive. This section explains what Privacy AI accesses from your Google Account, and how that information is used, stored and shared.

What we access

Privacy AI requests only Google’s drive.file permission. With it, the app can access only:

• the specific files you choose in Google’s own file picker;
• a folder named privacy_ai that Privacy AI creates in your My Drive, and the files in it that Privacy AI created or that you chose.

When you add a file, Privacy AI saves a copy of it in privacy_ai and works only on that copy. Your original file is not changed. Privacy AI cannot see the rest of your Drive, including files you move into privacy_ai yourself, unless you chose them in Privacy AI. To identify your connected account, Privacy AI also reads your Google account’s email address, display name and account identifier.

How we use it

Google Drive data is used only to provide the features you ask for in the app:

• listing and searching the files in privacy_ai;
• attaching files you choose to a chat;
• reading them;
• copying the files you add into privacy_ai;
• and, only if you grant the separate Write or Delete permission, editing files in privacy_ai, creating files there, or moving them to the Trash.

Files outside privacy_ai are never edited or moved to the Trash. Write and Delete are off until you turn them on. The app asks you before each change unless you choose otherwise for writes, and it always asks before moving a file to the Trash.

Where it is stored

Your Google sign-in tokens are stored only in your device’s Keychain and are never synced or included in backups. Your connected-account settings, temporary copies of downloaded or exported files, and a local activity log of the changes made to your files are stored only on your device. They are not synced to iCloud and are not included in app backups. The activity log records file names, the type of change and short summaries. If you attach a Drive file to a chat, its content becomes part of that chat. Like your other chats, it stays on your device, or in your personal iCloud storage if you have enabled iCloud syncing.

How it is shared

All requests go directly from your device to Google. AcmeUp Inc. operates no server in between and never receives, stores or has access to your Google data. When you ask an AI model to work with a Drive file, the relevant content is sent only to the AI model you selected, as part of that request. If you use an on-device model, it never leaves your device. If you use a cloud provider you configured, it goes directly to that provider under its own privacy policy. We do not sell Google user data, use it for advertising, or let anyone at AcmeUp read it.

AI and machine learning

We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models. We do not transfer it for that purpose.

Limited Use

Privacy AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

You can disconnect a Google account at any time in Connectors > Google Drive. Disconnecting deletes that account’s tokens, settings and cached files from your device and can revoke Privacy AI’s access with Google. Disconnecting does not delete the privacy_ai folder or the copies in it; delete them in Google Drive if you no longer need them. Google keeps its own record of the files you allowed Privacy AI to access. To remove it completely, also remove Privacy AI at myaccount.google.com/permissions.

Other Network Connections

Privacy AI also connects to the internet to download AI models you choose (for example from Hugging Face), and to refresh model lists, prices and settings from AcmeUp's static file server (static.acmeup.com). These requests only download files and upload none of your content. Like any web request, they reveal your device's IP address to the server.

Use of Information

We use the limited data we receive only to:

• understand which features are used and fix crashes, if you allow usage analytics or crash reports;
• measure which advertising campaigns led to installs, if you allow tracking;
• manage and verify subscriptions;
• respond to feedback you send us.

We do not:

• sell your data or build advertising profiles of you;
• use your content to train AI models;
• receive your chats, files, voice or other content, except what you choose to send us as feedback.

Data Storage and Security

Your chats, files, settings and generated content are stored on your device, or in your personal iCloud storage if you enable iCloud syncing. Data is protected by Apple’s on-device security mechanisms and iCloud’s encryption standards. API keys you enter for AI services are stored with your other app data: on your device, and in your personal iCloud storage if you enable iCloud syncing. Keys and access tokens for some tools and connections are stored in the Keychain and sync through iCloud Keychain if you use it. Sign-in tokens for accounts you sign in to, including Google Drive, are stored only in your device's Keychain and are not synced. Your choices about which cloud AI services may receive your data are stored only on your device.

We do not transmit, back up, or host your content on our servers.

Cookies and Tracking

AcmeUp sets no cookies or web beacons. Web pages you open inside the app may set their own cookies, as in any browser.

The only analytics in Privacy AI are the optional usage analytics and crash reports described above. The advertising identifier is read only if you allow tracking and usage analytics is on, and only to measure which ad campaigns led to installs.

Data Retention

Because Privacy AI stores your data locally, retention is controlled by you. You may:

• Delete chats and files within the app
• Deny a cloud AI service, or turn off usage analytics and crash reports, in Settings > System Settings > Privacy; you can also remove a cloud AI service from the app
• Remove app data through your device's settings

Google keeps usage analytics for the periods described above (user-level data 14 months, event-level data 2 months) and crash reports for 90 days. Each third-party AI service keeps data under its own policy.

Children's Privacy

Privacy AI is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices or for legal reasons. We will notify users through the app interface or our website when significant updates are made. Continued use of the app after such changes constitutes your consent to the new policy.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

AcmeUp Inc. Email: support@acmeup.com

Privacy AI — Where cutting-edge AI meets uncompromising privacy.

Your data. Your control.