ChatᵒᵏF
ChatᵒᵏF
Privacy Policy
ChatᵒᵏF runs its language models entirely on your device. Your conversations are never sent to any server, because there is no server to send them to.
Effective September 2026What we collect
Nothing. ChatᵒᵏF has no analytics, no crash reporters, no advertising identifiers, and no user accounts. There is no backend and no database of users.
What stays on your device
Everything you type, every image or document you attach, every reply the model generates, and the model weights themselves live on your device. Inference runs locally on the device's own GPU; prompts and replies are never uploaded anywhere. Conversations are not synced or backed up by the app, and deleting the app removes everything it ever stored.
If you ask the app to remember something, it writes a short note in plain text on the device. Every note is listed under Memories, to read or to delete, and one switch (Total Recall, in Settings, Intelligence) stops the app reading or writing them. Notes are left out of iCloud and device backups unless you turn on Backup Memories in Settings, Privacy; it is off by default.
Network access
ChatᵒᵏF uses the network for exactly two things, both visible and under your control.
Model download
On first run (and whenever you add a model in Settings) the app downloads model weights from the Hugging Face Hub over HTTPS. This is an ordinary file download: the host sees your IP address, as with any download, and nothing else. Models are stored on the device and later launches need no network.
Optional lookups
The model can consult reference sources while answering. Two switches in Settings (also on the toolbar: airplane, book, globe) control what may leave the device. Both are on when the app is first installed; the toolbar button cycles through airplane mode (both off), Wikipedia only, and web access:
Tier 1
Wikipedia only
- Your question is matched to a Wikipedia article on the
device by a local semantic index; nothing you type is sent
to any search engine. Only the matched article's numeric id goes to
wikipedia.orgto fetch its text. - Today's headlines come from Wikipedia's public news feed; the request carries only today's date.
Tier 2
Web access
- Web search sends the model's search terms, and nothing else from
the conversation, to a search service: Parallel
(
parallel.ai, a commercial service, which also sees your network address) and, when Parallel is switched off or finds nothing, Mwmbl (mwmbl.org, a non-profit index that keeps no network address and no search that points back to you). Each has its own switch in Settings, Privacy, with a link to its policy. Pages the model picks from the results are fetched directly. - Weather resolves your approximate location from your IP address and queries public weather services (Open-Meteo, and the US National Weather Service where covered). The app never uses GPS and never asks for location permission.
With both switches off, ChatᵒᵏF makes no network requests at all after its models are downloaded. The app also screens outbound queries and refuses to transmit anything that looks like a private key or an access token.
Permissions
ChatᵒᵏF requests access only to:
- Images and text files you explicitly attach via the system file picker, the photo library picker, or drag and drop.
- Outbound HTTPS, for the model download and the optional lookups described above.
- The microphone, only when you tap the microphone button to speak a question. It listens until you pause, and the sound goes to the model on the device; it is never sent anywhere. Replies read aloud are spoken by a voice synthesized on the device.
The photo picker runs out of process, so the app never sees your library, only the photos you hand it. The app never requests your camera, contacts, or location.
Children's privacy
ChatᵒᵏF is not directed at children under 13. We do not knowingly collect information from children, or, for that matter, from anyone.
Changes to this policy
If this policy changes materially, we will update the effective date above. Continued use of the app after any change constitutes acceptance of the new policy.
Contact
Questions about privacy? Open an issue.