Skip to content

Privacy Policy for Enclave AI

Effective Date: September 29, 2026

Previous versions of this policy can be found in our policy archive.

At Enclave AI, privacy is our core feature. Our app is designed to operate primarily offline: your prompts and conversations stay on your device when using local models. We also offer optional cloud-based models through OpenRouter integration for users who need additional capabilities.

1. Data Collection Policy

We are committed to privacy through technical design:

  • Conversations with local models are processed on your device and are not sent to an AI service
  • Local models do not require an account or subscription
  • Firebase Analytics receives app usage events, such as screen views and button taps, to help us improve the app
  • Firebase Crashlytics receives crash reports and device diagnostics to help us fix problems
  • Cloud AI requests pass through our servers to OpenRouter and a model provider as described in Section 5
  • For subscribers, our servers maintain subscription status and cloud AI credits as described in Section 6

2. App Store and Device Permissions

The app may use the following device permissions and network connections:

  • Microphone access for voice chat. Speech recognition runs on your device; if you choose a cloud model, the resulting text is sent as part of your cloud AI request.
  • Siri & Shortcuts can use either a local or a cloud model, depending on the model you select.
  • Internet connectivity is used for model downloads, cloud AI, subscriptions, analytics, and diagnostics.

3. Local Data Storage

The app stores the following data on your device:

  • Custom assistant configurations
  • User preferences and settings
  • Conversation history (including both local and cloud model interactions)

Conversation history is stored locally and can be deleted in the app or by removing the app. When you use a cloud model, the content needed for that request is also transmitted as described in Section 5.

4. AI Models

Our local AI models:

  • Are included with the app or downloaded to your device before use
  • Run completely offline on your device
  • Do not send data to external servers
  • Do not require internet connection for operation

5. OpenRouter Integration and Cloud Models

When you submit a request to a cloud model, the app sends it to Enclave's servers, which forward it to OpenRouter and the provider serving the selected model. The provider can vary by model and routing. The request may include your message, relevant conversation history, custom assistant instructions, text extracted from attachments you add, transcribed speech, and enabled tool results. This content is used to generate and return the response.

  • Our servers process cloud requests to provide the response and account for subscription credits. We do not keep a server-side copy of your conversation history.
  • OpenRouter and the model provider process the request under their own privacy policies. Provider logging and retention practices may differ.
  • We do not sell conversation content or use it for advertising.

For more information, see OpenRouter's Privacy Policy and its provider directory, which links to provider-specific policies.

6. Subscription and Payment Data

When you subscribe to Enclave AI's cloud AI services:

  • All payment processing is handled by Apple through the App Store - we do not collect or store your payment card details
  • We receive a transaction identifier from Apple to verify your subscription status
  • We store your subscription status, tier, and credit balance on our secure servers
  • We track credit usage to deduct costs when you use cloud AI features
  • We do not sell or share your subscription data with third parties except as necessary to provide the service
  • Subscription data is transmitted securely using industry-standard encryption

This data is used solely to provide and manage your subscription service and is not used for advertising or marketing purposes.

7. Analytics and Crash Reporting (Firebase)

We use Firebase Analytics and Firebase Crashlytics to understand app usage and fix problems:

  • Analytics includes app interactions such as screen views, button taps, and model selections, together with app and device information.
  • Crash reports include technical diagnostics such as the device model, OS version, and stack traces.
  • Firebase may use an app installation identifier to associate events or crashes from the same installation. We do not intentionally include conversation content in analytics events.

For more information, see Firebase Privacy and Security.

8. Third-Party Integration Privacy

When using system integrations:

  • Siri & Shortcuts use Apple's frameworks, and voice chat uses on-device speech recognition.
  • If you select a cloud model for these features, the request text is sent to the services described in Section 5.

9. Data Retention

We retain data for the following periods:

  • Subscription data: Retained while needed to manage your subscription, handle billing and support, and meet legal obligations. You can request deletion as described below.
  • Analytics data: Retained according to our Google Analytics data retention settings; aggregate reports may remain available longer.
  • Crash reports: Firebase retains crash traces for 90 days before starting removal.
  • Local data: Stored on your device until you delete it or uninstall the app

10. Your Data Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of your personal data we hold
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a portable format
  • Cloud AI: Switch to a local model at any time to stop sending new cloud AI requests. This does not delete requests already processed by third parties.

To exercise these rights, contact us at enclave-support@agentmail.to. We will respond to your request within 30 days.

11. Children's Privacy

Our app is not intended for use by children under the age of 13. We do not knowingly collect or process data from children under 13.

12. Your Responsibilities

While we ensure privacy through our approach, you are responsible for:

  • Maintaining your device's security
  • Managing your device's backup settings
  • Protecting access to your device
  • Managing any data you choose to share from the app
  • Understanding the privacy implications of using cloud models versus local models
  • Reviewing OpenRouter's privacy policy and the policies of any cloud model providers you use

13. Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices or for legal reasons. We will notify you of any material changes through the app or our website.

14. Contact Us

If you have any questions about our privacy practices or this policy, please contact us at enclave-support@agentmail.to.