Privacy Policy

Last updated: February 8, 2026

Overview

SovereignAI is an iOS client that connects to AI servers you choose. We do not operate any servers, and we do not receive any of your data. This policy explains what data the app handles and where it goes.

Data we collect

None. SovereignAI does not send any data to us. There are no analytics, no telemetry, no crash reporting, and no advertising SDKs.

Data stored on your device

The following data is stored locally on your device and never leaves it unless you explicitly configure a server connection:

• Chat conversations — stored as files in the app's sandboxed Documents directory.
• API keys and authentication tokens — stored in the iOS Keychain (hardware-encrypted).
• Settings — server URL, model preferences, and tool settings stored in UserDefaults.

Data sent to your AI server

When you send a message, the app transmits your conversation to the server endpoint you configured. This may include:

• Your messages and the conversation history (within the context length you set). If your message contains #label references, messages from other conversations with that label are also included in the request.
• A system prompt
• Your selected model name and sampling parameters
• Authentication credentials (API key or token) in request headers

You control which server receives this data. The app supports self-hosted servers (Ollama, vLLM, llama.cpp, etc.) as well as third-party API providers. Review the privacy policy of any third-party provider you connect to.

Web search, URL fetching, and image search

If you enable the web search or image search tools, the app sends search queries to DuckDuckGo and may fetch content or image thumbnails from URLs returned in search results. If you enable the URL fetching tool, the app fetches content from URLs the model requests, including PDF documents. PDF files are downloaded and their text is extracted on-device using Apple's PDFKit framework. These features are enabled by default and can be turned off at any time in settings.

OIDC authentication

If you configure OpenID Connect authentication, the app communicates with your OIDC provider to obtain and refresh tokens. Tokens are stored in the iOS Keychain.

Third-party services

The app does not include any third-party libraries or SDKs. All functionality is implemented using Apple's native frameworks.

Data deletion

You can delete your data at any time:

• Delete individual conversations from the session list.
• Reset all settings from the settings menu, which clears stored credentials, tokens, and preferences.
• Uninstall the app to remove all data, including Keychain entries.

Age rating

SovereignAI is rated 17+ because it connects to user-configured AI servers whose responses are not moderated or filtered by the app. The app is not intended for use by anyone under 17.

Changes to this policy

Updates will be posted on this page with a revised date.

Contact

Questions about this policy can be directed to the GitHub issue tracker.