Privacy Policy

Summary

OpenClient does not send analytics, telemetry, or crash reports to the developer. The app primarily runs on your device. Data leaves it only for configured and upstream providers, Apple Speech where applicable, use of the Votice feedback board, iCloud sync, or voluntary purchases processed by Apple through StoreKit.

Developer Services

OpenClient does not use a developer-operated backend for conversations, analytics, telemetry, usage tracking, or crash reporting. Configuring, opening, or using the feedback board may contact the developer-operated Votice service as described below.

Local & iCloud Storage

Except for the transmissions described below, app-managed data is stored on your device or in your personal iCloud account. The developer has no access to that stored data. Specifically:

• Content — conversations; separate attachment binaries, including documents and generated images; profile JSON; memory JSON, including model-created memory; custom prompt templates; and deletion or tombstone metadata are stored locally.
• iCloud sync — this content syncs only when iCloud is available and the app's iCloud sync setting is enabled. Disabling that setting stops future app synchronization but does not automatically remove files already in iCloud.
• Settings — remain on the device.
• API keys & server URL — stored exclusively in the device Keychain using the iOS/macOS Security framework. Never transmitted to the developer.
• Spotlight index — conversation titles and message excerpts are indexed locally in Spotlight to enable on-device search. This data does not leave your device.
• App Group — widgets store a limited snapshot of up to six recent conversations (title, model, last-message preview, and date). The Share Extension and Shortcuts temporarily stage text, URLs, images, or PDFs until the app consumes or clears them. This data stays on device and is shared only between the main app and its extensions.

Server Communication

The app sends requests to the server URL you provide: an Ollama instance, a LiteLLM proxy, or another OpenAI-compatible backend. Depending on its configuration, that server may forward content to upstream model or search providers, which may log, retain, or process it under their own policies. Requests can include:

• Chat messages and conversation context. For non-private chats, the effective context may include profile and memory data.
• Images and documents you attach to messages (Vision)
• Audio data for voice transcription: depending on the selected transcription setting, audio is either sent to your configured server via /v1/audio/transcriptions or processed using Apple's Speech framework. Apple Speech may process audio according to Apple's platform behavior and settings and is not guaranteed to run on device.
• Text for speech synthesis (Text-to-Speech via /v1/audio/speech)
• Prompts for image generation; generated images arrive in compatible chat completion responses
• Web search queries, which your LiteLLM server forwards to the search provider you have configured server-side (e.g., Brave, Tavily, DuckDuckGo). The app never contacts search providers directly.
• Tool call inputs and outputs when agent mode is active

The developer does not receive this communication unless the server or provider you configure is operated by the developer.

Shared & Imported Content

Content received via the Share Extension, custom URL scheme (openclient://), drag and drop, or Apple Shortcuts is processed on device and may be sent to your configured server and its upstream providers when you use it in a request. The developer does not otherwise receive it.

Third-Party Dependencies & Analytics

The app includes VoticeSDK and ConfettiSwiftUI as runtime dependencies. It does not integrate advertising networks, tracking frameworks, or analytics SDKs. SwiftLint is used as a build-time code-analysis tool and is not part of the shipped app.

VoticeSDK provides the optional feedback board in Settings. Feedback can be submitted anonymously, without an account or required name. Configuring, opening, or using the board may send a random persistent device identifier and technical data such as platform, language, and app version/build to operate suggestions, comments, and votes and prevent duplicates. The random identifier does not directly contain your name, email, API credentials, or conversation content. Optional text, images, and a nickname are sent only when you choose to provide them. Feedback and comments may be visible to other users.

Open Source & Auditable

OpenClient is fully open source under the GNU Affero General Public License v3.0. You can inspect, audit, and verify every line of code in the GitHub repository. This transparency lets you review the app's data-handling behavior.

Children's Privacy

The app does not knowingly solicit personal information from children under 13. Do not submit a child's personal data through chats, attachments, speech, searches, or feedback unless legally authorized.

Changes to This Policy

If this policy is updated, the changes will be published on this page with an updated revision date.

Contact

If you have questions about this policy, you can open an issue on the GitHub repository.