Gadeon
Privacy Policy
Gadeon runs its language models entirely on your device. Your conversations are never sent to any server, because there is no server to send them to.
Effective July 2026What we collect
Nothing. Gadeon has no analytics, no crash reporters, no advertising identifiers, and no user accounts. There is no backend and no database of users.
What stays on your device
Everything you type, every image or document you attach, every reply the model generates, and the model weights themselves live on your device. Inference runs locally on the Apple Neural Engine; prompts and replies are never uploaded anywhere. Conversations are not synced or backed up by the app, and deleting the app removes everything it ever stored.
Network access
Gadeon uses the network for exactly two things, both visible and under your control.
Model download
On first run (and whenever you add a model in Settings) the app downloads model weights from the Hugging Face Hub over HTTPS. This is an ordinary file download: the host sees your IP address, as with any download, and nothing else. Models are stored on the device and later launches need no network.
Optional lookups
The model can consult reference sources while answering. Two switches in Settings (also on the toolbar: airplane, book, globe) control what may leave the device:
Tier 1
Wikipedia only
- Your question is matched to a Wikipedia article on the
device by a local semantic index; nothing you type is sent
to any search engine. Only the matched article's numeric id goes to
wikipedia.orgto fetch its text. - Today's headlines come from Wikipedia's public news feed; the request carries only today's date.
Tier 2
Web access
- Web search sends the model's search terms to the Mwmbl search engine, and pages the model picks from the results are fetched directly.
- Weather resolves your approximate location from your IP address and queries public weather services (Open-Meteo, and the US National Weather Service where covered). The app never uses GPS and never asks for location permission.
With both switches off, Gadeon makes no network requests at all after its models are downloaded. The app also screens outbound queries and refuses to transmit anything that looks like a private key or an access token.
Permissions
Gadeon requests access only to:
- Images and text files you explicitly attach via the system file picker, the photo library picker, or drag and drop.
- Outbound HTTPS, for the model download and the optional lookups described above.
The photo picker runs out of process, so the app never sees your library, only the photos you hand it. The app never requests your camera, microphone, contacts, or location.
Children's privacy
Gadeon is not directed at children under 13. We do not knowingly collect information from children, or, for that matter, from anyone.
Changes to this policy
If this policy changes materially, we will update the effective date above. Continued use of the app after any change constitutes acceptance of the new policy.
Contact
Questions about privacy? Open an issue.