Privacy Policy

Summary

Loci is built around local processing. Your chats, prompts, replies, files, audio, images, memories, calendar data, and reminders are not collected by Loci.

All chat inference runs on your device. Loci does not use a third-party generative-AI service (for example, OpenAI, Anthropic, or Google) for chat. There is no cloud chat model and no remote Loci inference server: your prompts and conversations are processed on your device and are never transmitted to us or to anyone else for generative-AI processing. Optional operating-system speech input is described separately below.

On platforms that offer diagnostic sharing, it is on by default. iOS and Android ask during setup and send nothing until setup finishes. Windows setup does not ask; you can turn sharing off at any time in Settings. When sharing is on, Loci collects only content-free diagnostic and performance data to help us improve speed, reliability, model loading, downloads, and crash recovery. We never collect prompts, replies, files, or other personal content through diagnostics.

Diagnostics

Where diagnostic sharing is available and on, it may include technical information such as app version, operating-system version, and a hardware-class profile: the device or system model (for example “iPhone 15 Pro,” or a Windows PC’s manufacturer and model — never a name you have given your device), the processor and graphics class, installed memory, and a coarse capability tier. It may also include a randomly generated persistent pseudonymous app-device identifier, model/runtime state, whether a battery/energy saver is active, download and model-load timing, response-speed measurements, crash or hang signals, error categories, coarse usage counts, model-journey outcomes, and the country you connect from (derived at a country level from your network connection — never a precise location, and your IP address is not stored in the diagnostic record). The app-device identifier is not linked to your name, email, or any account, and Loci has no account system.

On Windows, the bounded native and recommendation-evidence spools remain on the device. The Windows shell sends only a reviewed, closed-field projection through its durable HTTPS telemetry outbox. It never includes chats, prompts, replies, files, paths, account identifiers, or raw model data. Turning sharing off stops collection of new remote events. Events already accepted into the outbox — including the opt-out receipt — may finish uploading.

Where diagnostic sharing is available and enabled, the shared records are sent to Loci’s own backend, which is hosted on Supabase (our database and hosting provider). They are used only to understand what is slow, what breaks, and how to make Loci faster and more reliable. Diagnostics are not shared with advertising networks or data brokers, are not sent to any third-party generative-AI service, and are not used for ads, tracking, or profiling.

What Diagnostics Never Include

• Prompts, replies, conversation text, or conversation titles
• Files, images, audio, memories, calendar data, reminders, or contacts
• Names, email addresses, payment information, or other personal information
• API keys, local secrets, or the contents of anything you ask Loci to process

Optional Online Features

Most Loci features run on your device. A few optional features need an internet connection to work:

• Web search. When web search is enabled and the assistant looks something up, the specific search query is sent directly from your device to the search service used by that platform. On Windows, Loci tries Bing first; only when it returns no usable result may Loci send the same query to DuckDuckGo and then Wikipedia, stopping after the first usable response. Windows may then request up to four public HTTPS pages returned in the results and use readable text from at most two of them. On Apple platforms, matching weather, air-quality, places, finance, holiday, sports, entertainment, or trending questions may first contact structured services that include Open-Meteo, Apple Maps, Yahoo Finance, CoinGecko, Stock Analysis, Hargreaves Lansdown, Nager.Date, ESPN, JustWatch, and, in the quality source setting, Google Trends, with Hacker News and Wikimedia as possible trending fallbacks. If you grant location access for a nearby places request, Apple Maps also receives your device location as the search region; the other structured providers see the query, including any place name it contains, but not those coordinates. General quality-mode search can use Bing, DuckDuckGo HTML, DuckDuckGo Lite, Mojeek, DuckDuckGo Instant Answer, and Wikipedia; when that direct roster has no usable result, an eligible device may make one Google Search attempt through an on-device WebKit view, subject to availability and cooldown gates. The Apple privacy source setting removes Bing from the direct roster and disables the Google Search rescue and the structured trending route, including Google Trends and its Hacker News and Wikimedia fallbacks; other matching structured services may still receive the query. Loci does not attach your conversation, files, account identity, or device identifiers to these requests, and the traffic does not pass through a Loci server. As with an ordinary internet request, each destination can receive your IP address and routine connection and request-header information. When Windows produces a grounded answer, Loci retains the query, retrieval time, reason, and source snapshot locally with that conversation so its citations can be restored. The query is not uploaded to or retained by a Loci server. You can use the most restrictive search setting or avoid web search to keep a chat local.
• Voice input. On Windows, voice typing uses the operating system’s online speech-recognition capability when you invoke it. Microphone audio is handled by the Windows speech service under your Windows privacy settings; it is not sent to or stored by a Loci server. Typing a prompt does not use that service.
• Model downloads. When you choose to download a model, its weight files are fetched from public repositories on Hugging Face. This is a standard file download and includes no prompts or personal data.

Website

askloci.ai uses Vercel Web Analytics and Speed Insights to understand aggregate traffic and site performance. These services do not use cookies or persistent identifiers and do not follow visitors across websites or days. We do not use ad pixels, advertising profiles, session replay, heatmaps, or cross-site tracking.

Website analytics may include the requested page, limited campaign parameters, referring site, timestamp, coarse location, browser, operating system, device type, and performance measurements such as page-load responsiveness and layout stability. Vercel reports this information in aggregate. We do not send names, email addresses, form contents, or anything from the Loci app to website analytics.

askloci.ai honors Global Privacy Control and browser Do Not Track signals. When either signal is enabled, the site does not send analytics or performance events. Our hosting provider may still process basic server logs, such as IP address, browser type, requested page, and time of request, to deliver and secure the site.

Support

If you contact us for support, we receive the information you choose to send. Support messages are used only to respond to your request and troubleshoot the issue.

Sharing

We do not sell personal information, and we do not send chats to a third-party generative-AI service. Content-free diagnostics and limited operational data may be processed by the service providers and destinations involved in the feature you choose: Supabase (backend and diagnostics hosting on platforms that upload them), Vercel (website and Windows-download hosting, plus aggregate site analytics), Apple and Google (app distribution and, where applicable, in-app purchases), Hugging Face (model file downloads you request), platform-selected general web-search services that may include Bing, DuckDuckGo HTML, DuckDuckGo Lite, DuckDuckGo Instant Answer, Mojeek, Wikipedia, or the gated Google Search WebKit rescue described above, structured grounding services that may include Open-Meteo, Apple Maps, Yahoo Finance, CoinGecko, Stock Analysis, Hargreaves Lansdown, Nager.Date, ESPN, JustWatch, Google Trends, Hacker News, or Wikimedia depending on the question and setting, public HTTPS pages returned as search results where a platform performs direct readable-page requests, and Microsoft (Windows online speech recognition only when you invoke Windows voice input). This describes possible destinations; it does not mean any one query contacts every provider. Each destination receives only the limited data described above, including the IP address and routine connection and request-header information inherent in a direct internet request.

Retention

Because prompts, replies, and personal content are not uploaded to us through diagnostics, we do not retain that content on our servers. Vercel discards the temporary identifier used for aggregate website visitor counts after 24 hours. Pseudonymous diagnostic records, aggregate website metrics, hosting logs, and support messages may be kept only as long as reasonably needed for operations, reliability, security, support, or legal compliance.

Your Choices

Where diagnostic sharing is available, you can turn it off in Loci. You can enable Global Privacy Control or Do Not Track in your browser to stop website analytics. You can also avoid optional online features, such as web search, if you do not want an online lookup. You can manage app permissions through Android, iOS, iPadOS, macOS, Windows, and relevant app-distribution settings where available.

Children

Loci is not directed to children under 13.

Changes

We may update this policy as Loci changes. The latest version will be posted on this page.

Contact

Loci is operated by Cozu LLC. For privacy questions, use the developer contact on Loci's official download listing or visit Loci Support.