Privacy Policy

Unbound runs language and image models locally — in the browser on the web, and on the device in the iOS app. We operate no inference server, no account system, and no analytics. We do not collect, store, or transmit your prompts, responses, chats, attachments, or device data.

• —Chats, messages, and titles — stored locally (a local database in the app, IndexedDB in the browser).
• —Attachments you add to a message, including photos.
• —Downloaded model files, kept in the app’s private storage (OPFS on the web).
• —Settings: appearance, inference parameters, active model, and any API key you enter.
• —Model output, including generated images.

None of it is uploaded. Deleting a chat, erasing all chats, or deleting a model removes the data from your device, and there is no copy anywhere else.

• —Model downloads. When you start a download, the model file is fetched from Hugging Face. Hugging Face sees the request and your IP address under its own privacy policy. No prompt or chat data is involved.
• —Optional web search. If — and only if — you enter your own Tavily API key and turn web search on, the search text derived from your message is sent to Tavily with your key so results can be fed back to the local model. The key is stored on your device and never sent to us. Leave it empty and the app makes no search requests.
• —App updates. The iOS app checks Expo’s update service for a new JavaScript bundle. That check carries technical values such as platform, app version, and update identifier. It carries no prompts, chats, or personal data.
• —Links you tap. Opening a link from a model response hands it to your browser, which is then governed by that site’s policy.

The iOS app can read and write calendar events, reminders, and contacts, read health metrics (steps, distance, energy, heart rate, sleep), read and write the clipboard, and read photos you attach. Each one requires your explicit iOS permission and is used only when you ask the assistant to do something that needs it.

This data is read on the device, passed to the local model on the device, and discarded when the conversation is deleted. It is never transmitted to us or to any third party. Health data is read-only, and is never used for advertising, marketing, or sale — nor is any other data, because none of it leaves your device.

• —No accounts, sign-ins, or email collection.
• —No analytics, telemetry, crash reporting, or advertising SDKs.
• —No tracking, no advertising identifier, no cross-app or cross-site profiling.
• —No selling or sharing of personal data, because we hold none.

Unbound runs open-weight models without server-side moderation. Output can be inaccurate, offensive, or explicit, and it is generated on your device rather than reviewed by us. The app is intended for adults (18+). Do not rely on it for medical, legal, or financial decisions.

Unbound is not directed at children and we do not knowingly collect data from anyone, including children under 13.

If this policy changes, the revised version is posted here with a new effective date.

Questions about privacy: [email protected]. Support and troubleshooting: unbound.evalengine.ai/support.