Privacy Policy

Effective June 26, 2026

Onda ("Onda", "the app", "we", "us") is designed around a single principle: your data stays on your device. This policy explains, in plain language, exactly what data the app handles, what never leaves your device, the one case where data does leave, and the choices and rights you have. It applies to the Onda apps for iPhone, iPad, and Mac.

1. The short version

Onda has no user accounts and no servers of our own. Your prompts, the models' responses, your conversations, your personalization and context notes, your attached files and images, your device profile, and your settings are stored only on your device. We do not collect them, we cannot see them, and they are never transmitted to us or to any third party. We run no analytics, no advertising, and no tracking.

2. Who we are and how to reach us

Onda is published by JTR Labs. For any privacy question or request, email [email protected]. Because we hold no data about you, most requests are things you can satisfy yourself directly on your device (see "Your controls and rights" below).

3. Information we do NOT collect

We collect no personal data on any server, because we operate no server that receives your content. Specifically, there is:

• No account, login, email capture, or user identifier created by us
• No analytics, telemetry, crash-reporting, or usage measurement sent to us
• No advertising identifiers, cookies, fingerprinting, or cross-app tracking
• No third-party SDK embedded to profile you or monetize your data
• No sale or sharing of personal information (we have none to sell or share)

4. Information that stays on your device

The following is created and stored locally, under your control, and is not uploaded to us:

• Your prompts and the AI models' responses
• Your saved conversations, chat history, and run/benchmark history
• Your personalization ("memory") and Context-workspace notes
• Documents, folders, images, or audio you attach for the model to analyze
• Your device profile (such as chip, RAM, and free storage) used only to recommend which models will run well
• Your model favorites, personas, and app settings

On iOS this data lives in the app's private container; on macOS it lives in the app's Application Support directory and the system preferences store for that app. It is removed when you delete the relevant data in-app or uninstall the app.

5. The one time data leaves your device: downloading models

To run a model locally, Onda downloads that model's files from the model host you choose — for example, Hugging Face — over an encrypted HTTPS connection directly from your device to that host. As with any download, the host necessarily receives your device's IP address and the name of the file requested, and the host's own privacy policy governs that interaction. Onda does not attach any identifier of you to these requests, and no prompt, conversation, attachment, or personal content is ever included in a model download. Model downloads are the only outbound network activity Onda initiates.

6. Permissions you control

Each permission below is optional, requested only in context, and used only for the feature you invoke:

• Camera / Photos — only when you attach an image to ask a vision-capable model about it. The image is processed on-device.
• Microphone / Speech Recognition — only for voice dictation. Where your device supports on-device speech recognition, transcription happens on-device.
• Location — only if you explicitly enable it for a specific question, to give a model local context.
• Local network (macOS) — only if you turn on the optional local API server, which listens on your computer's loopback interface (localhost) so your own apps and scripts can use the on-device model. It is not exposed to your network or the internet, and it is off by default.

7. Files, folders, and images you attach

On the desktop you can drop documents or folders into a chat, and on all platforms you can attach images. This content is read and processed locally to build context for the model. It is never uploaded to us and is held only for your session and your saved conversation on your device.

8. Third parties

• Model hosts (e.g., Hugging Face): see Section 5. Subject to their own privacy policies for the download connection only.
• Apple Intelligence / Apple on-device model: if you select Apple's built-in model, it runs through Apple's on-device system and your use is also subject to Apple's terms; processing remains on-device.
• Apple App Store / distribution: if you obtain the app from the App Store, Apple may collect download and purchase analytics under Apple's own privacy policy. The Mac app distributed from our website does not involve that collection.
• The models themselves are third-party open-source models; their behavior and output are governed by their respective licenses, not by us.

9. Optional iCloud preference sync (iOS)

Off by default. If you enable it, only your app settings synchronize through your own private iCloud account under Apple's encryption — never prompts, conversations, notes, or attachments.

10. Device backups

If you back up your device to iCloud or to a computer, your on-device Onda data (such as conversations and settings) is included in that backup, which is yours and encrypted by Apple. Downloaded model files are excluded from backups where possible because they can be re-downloaded on demand.

11. Security

Network downloads use HTTPS. Your content never transits our infrastructure because we have none that receives it. On-device data is protected by your operating system's app sandbox and device encryption. No method of storage is perfectly secure, but keeping your data on your own device removes the largest category of risk — a central breach of a provider's servers.

12. Children

Onda is intended for users 17 and older and is not directed to children. We do not knowingly collect data from children (and, in fact, collect no personal data from anyone).

13. Your controls and rights

Because your data lives only on your device, you exercise your rights directly: you can view, edit, export, or delete your conversations and notes in-app, and "Clear history" and "Reset app" erase local data. Uninstalling the app removes all of it. Where laws such as the GDPR or CCPA/CPRA grant rights to access, correct, delete, port, or restrict processing of personal data, those rights are satisfied by this design — we hold no personal data to access or delete, and we do not sell or share personal information.

14. International users

Onda processes data on your device wherever you are; we do not transfer your content across borders because we do not receive it. Model downloads connect to the host you choose, which may be located in another country.

15. Changes to this policy

If this policy changes, we will update the effective date above and the in-app copy. Material changes will be reflected in the app's release notes.

16. Contact

Questions or requests? Email [email protected].

Onda is published by JTR Labs. This page mirrors the copy shown inside the app.