Where Your Data Lives: On the Phone, and Nowhere Else

Conversations, documents, memories, generated images and settings live in the app's own storage on your phone. There is no account, so there is no server-side copy, so there is nothing to request, export, subpoena or leak.

Where exactly

Structured data — conversations and messages, personas, jobs, agents, connectors, documents and their vector index, notebooks, memories, research runs and the network log — is in a SQLite database in the app's private directory. Model weights and attachments are files in the same private area. Settings are in a small key-value store beside them. All of it sits behind your device's own encryption and the platform's app sandbox, which is the same protection your messaging app relies on.

Deleting means deleting

Delete a message, a conversation, a document or a memory and the row is gone. Clear everything from the privacy screen, or uninstall the app, and it is all gone. There is no second copy in a cloud waiting out a retention period, because it was never sent to one.

The trade, stated plainly

No sync. Your conversations are not on your other phone, and if you lose the device without a backup, they are gone with it. That is the direct consequence of there being no server, and it is a real cost — worth knowing before you rely on the app as an archive.

What does leave, and why

Three things, all visible in the network log: model and catalog downloads, anything you explicitly asked for over the network (searches, connector calls), and anonymous usage statistics — model used, speed, device tier, OS and app version, a random install id. Never message content, and there is a switch to stop even that. Read the full privacy policy for the detail.