How OfflineGPT handles your data

Introduction

This Privacy Policy describes how OfflineGPT (“the App”) handles information when you use the App on Android, and how we handle information when you visit offlinegpt.tech (“the Website”).

OfflineGPT is built offline-first: the default path is local AI on your device. The App also offers optional online features (such as connecting to external AI providers with your API keys, web search, downloading models, or OfflineGPT hosted models). You decide whether to use them. Hosted models are used only when you explicitly select them.

Responsible Entity & Contact

Controller / Responsible Entity: CodeAlp (Switzerland)
Privacy Contact: info@codealp.ch

Scope of This Policy

This policy covers the OfflineGPT app for Android (Google Play) and this Website. It does not replace the privacy policies of third-party services you choose to use (for example OpenAI, Google, Infomaniak, DeepSeek, or a search engine when you enable those features in the App).

What CodeAlp Actually Receives

Core on-device use: Chats, generated text and images, imports, OCR results, transcriptions, and tool outputs are processed and stored on your device. CodeAlp does not collect copies of that content on our own servers for that mode of operation. We are not “syncing” your private threads to ourselves.

Why privacy policies still mention “personal data”: If you type your name or personal notes into the App, that content is personal to you—but it remains on your device unless you use an optional online feature that sends it somewhere else. We describe this so we are transparent with regulators; it does not mean CodeAlp secretly accesses it.

We may receive limited information only in these specific situations:

• You email us (e.g. support) — we receive what you include in that message.
• In-app purchases — Google Play Billing handles payment on Android; we receive non-payment-card signals from the store needed to confirm a hosted-models subscription (see Section 09).
• OfflineGPT hosted models — if you explicitly select one, the OfflineGPT Gateway receives the request to verify the subscription and allowed model, then forwards it to the inference provider for the selected model: Infomaniak AI Services for Gemma 4, OpenAI for GPT-5.6 / GPT-6 Luna and GPT-4o mini, or DeepSeek for DeepSeek Flash. Prompt and response bodies are processed transiently in memory and are never retained as chat content (see Section 06).
• This Website — like any website, hosting can create basic technical logs when you load a page (see Section 12).

On-Device Processing (Default)

When you use local models and local tools, processing happens entirely on your device. That includes, depending on your settings: chat history, on-device text and image generation, OCR, speech-to-text (Whisper), text-to-speech (Supertonic 3), safety checks, settings, and downloaded model files.

CodeAlp has no remote access to that local data. Uninstalling the App or clearing app data removes it from your device according to Android’s rules—we cannot remotely wipe or read your chats.

Optional Internet Use (Your Choice)

Some features require a network connection: downloading or updating models, optional web search, using an external AI provider with your own keys, or OfflineGPT hosted models. You choose whether to use these; they are not required for core offline use after models are installed.

OfflineGPT hosted models (No Training across all models): If you explicitly select a hosted model, the App sends the request over HTTPS to the OfflineGPT Gateway operated by CodeAlp. The Gateway verifies the active subscription and the allowed model, then forwards the request for inference. Model training is disabled across all hosted providers — neither OfflineGPT nor the underlying inference providers use your prompts or responses to train AI models:

• Gemma 4 is processed by Infomaniak AI Services in Swiss data centers. Submitted AI requests are not stored and prompts are never used to train models.
• GPT-6 Luna & GPT-4o mini are processed via API by OpenAI with API data training disabled.
• DeepSeek Flash is processed via API by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. with model training disabled. DeepSeek processes data in the People’s Republic of China, where Chinese data protection law applies to that inference path.

The generated response is streamed back to the App. The Gateway processes prompt and response data transiently in memory while forwarding. OfflineGPT does not persist prompt bodies, response bodies, cloud conversation histories, or uploaded content as a personal cloud library.

External AI Providers (Your API Keys / BYOK)

If you enable optional cloud providers and enter your own API keys (for example OpenAI, DeepSeek, Google Gemini, Anthropic, Groq, Mistral, xAI, OpenRouter, or a custom compatible endpoint), requests go directly from your device to that provider under that provider’s terms and privacy policy. You are responsible for choosing providers you trust. We do not control how a third party logs, stores, or trains on data sent directly to them.

Web Search & Websites

If you use optional web search, your query goes to the search engine you configured (such as DuckDuckGo Lite, Brave Search, or Tavily). The App may fetch public web pages to summarize or extract content. That traffic is directly between your device and those services—never a hidden pipeline to CodeAlp.

In-App Purchases & Billing

On Android, the optional hosted-models subscription is processed through Google Play Billing. Payment card data is handled exclusively by Google, not by us. We never receive your credit card number. We receive only limited store signals to confirm the subscription and necessary operational metadata (anonymous entitlement identifier, access state, validity period, and aggregate quota/abuse-prevention counters). That metadata never contains your chat content. See Google’s Privacy Policy.

Device Permissions

The App may request microphone access (Whisper voice dictation), camera access (photo capture / OCR), and local storage/files (model and document import)—solely for the features those permissions serve. For local features, processing stays 100% on the device.

Storage on Your Device

The App stores data locally in its private Android sandbox: chats, generated outputs, settings, downloaded GGUF/LiteRT/MNN models, API configurations, encrypted keys, and subscription state. You can clear all local data at any time via Android system settings or by uninstalling the App.

Third Parties & Website Hosting

Visiting offlinegpt.tech may generate standard technical server logs (such as IP address, timestamp, requested URL, and user-agent) at the hosting/CDN layer (Vercel) for security and reliability, as well as aggregated, cookie-free web analytics (page views and referrers without cross-site tracking or persistent identifiers). These website metrics have zero connection to your local App conversations.

Legal Bases (Switzerland / EEA / UK)

Where Swiss FADP (nDSG) or EU/UK GDPR applies, we rely on contract performance and legitimate interests for providing the App, operating the Website, responding to support inquiries, and validating subscriptions via Google Play. Optional online features you explicitly trigger operate on your active choice and consent.

Your Rights

For information held only on your device, you have full sovereign control (delete chats, clear storage, or uninstall). Because we do not hold a copy, we cannot export or erase local data remotely.

For any personal data we hold directly (such as support emails or billing validation records), you have the right to request access, correction, deletion, or restriction under applicable law. Contact info@codealp.ch — we aim to respond within two business days.

Children’s Privacy

The App is not directed at young children. We do not knowingly collect personal information from children. If you believe a child has submitted personal data to us via support channels, please contact us so we can delete it promptly.

Security

Local data is protected by Android’s application sandboxing and your device lock/biometrics. Network requests for optional cloud features use TLS/HTTPS encryption.

Changes to This Policy

We may update this policy as new features are released. The canonical, up-to-date text is published at https://offlinegpt.tech/privacy/. Material changes may be announced in the App or on the Website where appropriate.

Contact & Effective Date

Questions or privacy requests: info@codealp.ch
Last updated: October 2026