Privacy Policy
Pocket LM – Private Offline AI
Effective date: 27 October 2026
This privacy policy applies to the Pocket LM app for mobile devices (iOS, iPadOS and Android), together with any related services operated by Junaid Tariq, operating as FlutterNinja (collectively, the "Application"). Junaid Tariq is hereby referred to as the "Service Provider".
In short: Pocket LM runs AI models on your device. The Service Provider does not collect, receive or store your chats, files, photos, voice or any other personal data. There is no account, no analytics, no advertising and no tracking.
Information Collection and Use
The Service Provider does not collect personal data through the Application. In particular, the Application:
- does not require an account, sign-up or login;
- does not include analytics, crash-reporting or advertising SDKs;
- does not track you across other apps or websites;
- does not sell or share personal information.
Data Stored on Your Device
To work, the Application keeps the following on your device, in its private storage. None of it is sent to the Service Provider:
- Your chats, messages and settings.
- Copies of the documents and photos you attach to a chat, so the chat can still show them. They are deleted when you delete the chat.
- The AI model files you download or import.
- API keys for cloud models and your Hugging Face access token, if you add them. These are stored in the iOS Keychain or Android's encrypted storage.
Uninstalling the Application deletes this data. On iOS, it may be included in your own device backups (for example, iCloud Backup) according to your backup settings. On Android, the Application's data is excluded from cloud backups.
On-Device AI Processing
The AI models you download run on your device. Your prompts, the replies, and the documents and photos you ask about are processed on your device and are not sent anywhere, unless you choose a cloud model (see below).
If you use Apple's built-in on-device model (Apple Intelligence), your request is processed on your device by Apple's framework and is subject toApple's Privacy Policy.
Voice Input
When you use voice input, your speech is turned into text on your device. The Application only uses on-device speech recognition: if your device can't recognise your language without sending audio to a server, voice input is not offered. Audio is not recorded, stored or sent anywhere.
Camera, Photos and Files
The Application only accesses the photos, camera images and files you choose to attach. They are used to answer your question and stored as described above.
Siri and Shortcuts (iOS)
When you run a Pocket LM action from Siri or the Shortcuts app, the Application handles the request on your device and returns the reply to Siri or Shortcuts. Siri's processing of your voice is governed by Apple.
Internet Connections
The Application connects to the internet only in these cases:
- Downloading models. Model files are downloaded from Hugging Face (huggingface.co). Like any web request, Hugging Face receives your IP address and request details, under its own privacy policy. If you add a Hugging Face access token, it is sent only to Hugging Face, to download gated models. You can limit downloads to Wi-Fi in Settings.
- Cloud models, only if you add them. You can add a cloud model (for example OpenAI, Anthropic Claude, OpenRouter, or your own OpenAI-compatible server) with your own API key. When you chat with a cloud model, your messages, the conversation's history and any attachments in that chat are sent directly from your device to that provider, using your key. The Service Provider never receives them. The provider's own privacy policy and terms apply. Cloud models are clearly labelled in the Application.
- Links you open, such as this policy or a model's page, open in your browser.
Tips
If you choose to leave a tip, the purchase is handled entirely by Apple (App Store) or Google (Google Play). The Service Provider does not receive your payment details or your identity. The Application only learns whether the purchase went through, so it can say thank you. Apple and Google process the payment under their own privacy policies.
Notifications and Live Activities
Notifications (for example, when a download finishes or a reply is ready) and Live Activities are created on your device. The Application does not use a push notification server.
Permissions
The Application only asks for these permissions when you use the related feature. You can turn any of them off in your device's Settings at any time:
- Camera: to take a photo to ask about
- Photos: to pick a photo to ask about
- Microphone and Speech Recognition: for voice input, recognised on your device
- Notifications: to tell you when a download or a reply is ready
Third-Party Services
The Application relies on these third-party services, which have their own privacy policies:
- Hugging Face(model downloads)
- Apple(App Store, Apple Intelligence, Siri and Shortcuts on iOS)
- Google Play(distribution on Android)
And, only if you add them, the cloud model providers you choose, for exampleOpenAI,AnthropicorOpenRouter.
Data Retention and Deletion
The Service Provider holds no personal data about you, so there is nothing for it to retain or delete. You control the data on your device:
- delete a chat by swiping it in the chat list, or every chat with "Delete all chats" in Settings;
- delete your API keys and token with "Delete all secrets" in Settings;
- delete downloaded models in Settings › Storage;
- uninstall the Application to remove everything.
Your Rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA/CPRA in California), you have rights over your personal data, including access, correction, deletion and objection. Because the Service Provider does not collect or hold personal data through the Application, there is no data on its side to access or delete. You can still contact the Service Provider with any request or question atinfo@flutterninja.com.
Your California Privacy Rights (CCPA/CPRA)
The Service Provider does not sell or share personal information, and does not collect it through the Application. California residents can contact the Service Provider atinfo@flutterninja.comwith any questions.
Children
The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Application does not collect personal data from anyone, including children. If you are a parent or guardian with a concern, please contact the Service Provider atinfo@flutterninja.com.
Security
Your data stays on your device, protected by the operating system's app sandbox. API keys and tokens are stored in the iOS Keychain or Android's encrypted storage. Requests to cloud providers use HTTPS. A custom server you add is contacted at the address you enter. To keep your data safe, use a device passcode and keep your device updated.
Changes
The Service Provider may update this Privacy Policy from time to time. Changes will be posted on this page with a new effective date. Material changes will also be noted in the Application's update notes.
Contact Us
If you have any questions about privacy while using the Application, please contact the Service Provider atinfo@flutterninja.com.
