Back to Onllm Chat

Privacy Policy

Last Updated: January 24, 2026

Overview

Onllm Chat is a privacy-focused AI assistant that runs large language models entirely on your device. While your conversations never leave your phone, we do collect anonymized usage analytics to improve the app.

Your conversations stay on your device. We use analytics to understand app usage, but we never see your chats.

Key Privacy Principles

  • Conversations Stay Private: Your chat messages are stored only on your device and never sent to our servers.
  • Transparent Data Collection: We use analytics to understand how the app is used, but not what you say.
  • Minimal & Anonymous: Analytics are tied to a random ID, not your identity.

Data We Collect

Data Stored Locally on Your Device

Data Type Purpose Storage Location
Conversations Display chat history Device storage only
Model files Run AI locally Device storage only
App preferences Remember settings Device storage only

Analytics & Usage Data (via PostHog)

We collect anonymized usage metrics to improve the app:

  • Events Tracked: Model downloads, generation performance, feature usage, errors
  • Data Sent: Anonymous user ID (random UUID), app version, device info, timestamps
  • What We DON'T Track: Your conversation content, tool call parameters/results, model responses, location, device identifiers
  • Provider: PostHog (https://posthog.com) - Session replay disabled

Crash Reports (via Sentry)

When the app crashes, we automatically collect:

  • Stack traces and error logs
  • Device information
  • App state at crash time
  • Note: Personal information explicitly disabled. No chat content included.

Bug Reports (Optional)

When you manually report a bug:

  • Bug description (your text)
  • Debug logs (limited to 50KB)
  • Device information
  • Optional: Conversation content (limited to 20KB, only if you choose to include it)

What We DO NOT Collect

  • ❌ Your chat messages or conversations (except in optional bug reports)
  • ❌ Location data
  • ❌ Contacts, photos, or other personal files
  • ❌ Advertising identifiers
  • ❌ Behavioral profiles for advertising

Optional Features Requiring Permissions

Feature Permission Data Usage
Model Download Internet Downloads AI models from our servers
Google Sign-In Account access Optional sign-in for backup features
Tool Calling Calendar/Email Executes actions you explicitly approve

AI-Generated Content

The app uses on-device large language models to generate responses. Please note:

  • AI-generated content may not always be accurate
  • Generated content does not represent the views of the developers
  • You can report problematic content using the in-app reporting feature

How We Use Your Data

Analytics Data:

  • Understand which features are used
  • Measure app performance and stability
  • Identify and fix bugs
  • Prioritize new features

Crash Reports:

  • Diagnose and fix app crashes
  • Improve stability

Local Conversation Data:

  • Display your chat history
  • Provide context for AI responses
  • Never transmitted to our servers

Data Retention

  • Analytics Events: Retained by PostHog (configurable, typically 7 years)
  • Crash Reports: Retained by Sentry for 90 days
  • Local Data: Stored indefinitely on your device until you delete it

Data Security

  • All local data encrypted by Android's app sandbox
  • Analytics transmitted over HTTPS
  • No passwords or credentials stored
  • Google Sign-In uses secure OAuth 2.0

Your Rights & Controls

Delete Your Data:

  • Analytics: Contact us to request deletion of analytics tied to your anonymous ID
  • Local Data: Clear app data in Android settings or use in-app "Delete All Conversations"
  • Account: Sign out to disconnect Google account

Opt-Out of Analytics:

We plan to add an opt-out setting in a future update. For now, analytics are enabled by default.

Export Your Data:

All conversation data is stored locally. You can export conversations using the in-app share feature.

Children's Privacy

Onllm Chat is not intended for children under 13. We do not knowingly collect data from children.

Third-Party Services

PostHog Analytics

Analytics platform for usage metrics:

  • Provider: PostHog (https://posthog.com)
  • Data location: EU/US servers
  • Data collected: Anonymized events, device info
  • Session replay: Disabled for privacy

Sentry Error Tracking

Crash reporting service:

  • Provider: Sentry (https://sentry.io)
  • Data location: US servers
  • Data collected: Stack traces, device info
  • PII collection: Explicitly disabled

Model Downloads

Models are downloaded directly from HuggingFace CDN:

  • Your device connects to HuggingFace servers
  • We do not proxy or intercept downloads
  • Download metadata tracked via analytics (model ID, size)

Google Sign-In (Optional)

If you choose to sign in with Google:

  • We receive: Email address, display name, profile photo
  • Used for: Account identification only
  • Not shared with third parties

Changes to This Policy

We may update this Privacy Policy. The "Last Updated" date will reflect any changes. Continued use of the app after changes constitutes acceptance.

Contact Us

For privacy questions or concerns:

Your conversations are private and stay on your device. We collect anonymized analytics to make the app better, but we never see your chats.