Privacy Policy
Effective: July 27, 2026
The short version
Your Own AI runs on your device. With offline models, your conversations never leave your machine - there is no telemetry, no analytics, and no account required. And you don't have to take our word for it: the app is open source, so anyone can read the code and confirm it. The only times data moves are the ones you choose: downloading a model, using an online model, or signing a receipt. This policy lists every one of them.
On your device
Your conversations, AIs, memories, and knowledge documents are stored on your machine, written into signed, tamper-evident records built on Holochain and encrypted with a key only you hold. We never receive them and cannot read them. Deleting is in your hands: delete conversations individually, or Settings → Reset erases everything.
What leaves your device, and when
- Offline models: nothing. Ever.
- Downloading models and add-ons: a standard web request to the host (Hugging Face for models, GitHub for add-ons), which sees your IP address like any download.
- Online models (optional, paid): the message you send - and attachments only after you approve sending them - is forwarded through Flowsta's relay to the model provider. Flowsta strips your identity before forwarding; the provider receives the content but not who you are - no name, no email, no account details. The relay passes your messages through without storing or logging them. We record usage amounts only - model, tokens, cost - for billing. Web searches send your query to the search provider the same way.
- Signing a receipt (optional): if you sign an exported conversation, its hash, your public key, and a timestamp are published to Flowsta's public signing network so anyone can verify the file. The conversation itself is never uploaded.
That's the complete list. The app contains no telemetry, analytics, or crash reporting.
Backups go to your Vault, not to us
With a Flowsta Vault on your device, Your Own AI automatically backs up your encryption key, conversations, AIs, and memories into the Vault - encrypted, on your own machine. We never receive your backups. You can view, export, or delete them from the Vault's Your Data page at any time.
If you sign in with Flowsta
Signing in (needed only for online models) happens through the Flowsta Vault on your device. What Flowsta holds about your account is covered by the Flowsta Privacy Policy. Specific to Your Own AI, the servers hold: your plan and its billing records, usage amounts for online models (never content), and one activity marker per month - the fact that your account used the app that month, nothing about what you did. Payments are processed by Stripe; we never see your card details.
This website
This site collects nothing beyond standard hosting logs. No tracking, advertising, or analytics cookies. The account page signs in through Flowsta.
Release announcements (optional): if you subscribe in the footer, we store your email address with Mailchimp, our mailing provider, and use it only to announce new releases. Every email has an unsubscribe link, and unsubscribing removes you from the list. Mailchimp processes your address under its own privacy policy.
What we never do
- Sell your data or use it for advertising
- Read your conversations - offline ones never reach us, online ones pass through unstored
- Train AI models on your data
Children
Your Own AI is not for children under 13 (16 in the European Union).
Changes, law, contact
We'll note material changes on this page. Governing law: Victoria, Australia. Questions: privacy@flowsta.com.