Privacy Policy

Last Updated: November 1, 2025

1. Information We Collect

1.1 Data You Provide

PocketGem Agent is a privacy-first, offline-first application. All data you create is stored directly on your device:

• Conversations: All chat messages, prompts, and AI responses are stored locally on your device
• Documents: PDF, DOCX, and TXT files you upload for RAG (Retrieval Augmented Generation) are processed and stored locally
• Model Files: Downloaded Gemma model weights are stored in your device's private app storage
• Settings: Your LLM parameters (temperature, top-p, top-k, max tokens, etc.) and preferences
• MCP Server Configuration: If you configure Model Context Protocol servers, their URLs and authentication headers are encrypted and stored locally
• Hugging Face Authentication: If you authenticate with Hugging Face to download models, your access token is encrypted and stored locally

1.2 Automatically Collected Information

We collect zero analytics, crash reports, or usage data. The app operates entirely offline by default and does not send any telemetry, diagnostics, or tracking data to our servers or any third parties.

2. How We Use Your Information

All data processing occurs locally on your device. Your information is used solely to:

• Generate AI responses using on-device Gemma models
• Provide document-based question answering via local RAG (vector embeddings and semantic search)
• Execute tool calls (calculator, time, weather, web search) when you request them
• Connect to optional MCP servers you configure
• Download model weights from Hugging Face (one-time setup)
• Remember your conversations and settings across app sessions

3. Data Storage

3.1 Local Storage

All your data is stored locally on your device:

• Database: Conversations, messages, documents, and settings are stored in an encrypted Room database
• Model Files: Gemma model weights are stored in your device's private app storage directory, inaccessible to other applications
• Encrypted Credentials: MCP server headers and Hugging Face tokens are encrypted using Android Keystore with hardware-backed encryption (when available)

3.2 No Cloud Backups

PocketGem Agent explicitly disables Android's cloud backup and device-to-device backup features to ensure your conversations and data never leave your device. If you uninstall the app, all local data is permanently deleted.

4. Network Usage and Third-Party Services

PocketGem Agent operates 100% offline for core AI functionality. Network access is only used for the following optional features:

4.1 Hugging Face (Model Downloads)

To download Gemma models, the app connects to Hugging Face:

• What data is sent: Your Hugging Face access token (if you authenticate) or OAuth authorization (if you use OAuth login)
• Purpose: One-time download of gated Gemma model weights to your device
• After download: Models run entirely offline; no further communication with Hugging Face
• Hugging Face Privacy Policy: https://huggingface.co/privacy
• Your control: Model downloads are user-initiated only; you can skip authentication and use non-gated models

4.2 Model Context Protocol (MCP) Servers (Optional)

If you configure MCP servers for agent tool-calling:

• What data is sent: Tool call requests (function name and arguments) to the MCP server URL you configure
• Purpose: Enable the AI agent to use external tools and APIs you choose to connect
• Your control: You manually add each MCP server; connections are user-initiated; you can enable "Offline-Only Mode" to block all MCP calls
• Privacy note: MCP servers are third-party services. Review the privacy policy of each MCP server you connect to

4.3 Web Search Tool (Optional)

If you use the built-in web search tool:

• What data is sent: Your search query to DuckDuckGo's search API
• Purpose: Retrieve current information from the web to enhance AI responses
• Privacy note: DuckDuckGo does not track searches or create user profiles
• DuckDuckGo Privacy Policy: https://duckduckgo.com/privacy
• Your control: Web search is only used when you explicitly request current information; disable the tool in settings if you prefer

4.4 Google AI Edge LiteRT-LM (On-Device)

The app uses Google's LiteRT-LM inference runtime for on-device AI:

• Processing: All inference occurs entirely on your device
• No data transmission: LiteRT-LM does not send prompts, responses, or any data to Google servers
• Google AI Edge Terms: https://ai.google.dev/edge/litert/terms

5. Data Sharing

We do not share, sell, or transmit your data to third parties.

• We do not collect your conversations, prompts, or responses
• We do not sell your data to advertisers or data brokers
• We do not send usage analytics or crash reports to VaneSpark or any third party
• The only network communication occurs when you explicitly enable optional features (model downloads, MCP servers, web search) as described above

6. Data Security

We implement multiple layers of security to protect your data:

• On-Device Processing: All AI inference runs locally; prompts never sent to cloud servers
• Encrypted Credentials: MCP headers and Hugging Face tokens encrypted using Android Keystore with hardware-backed keys (AES-256-GCM)
• Secure Storage: All files and databases stored in app-private directories inaccessible to other apps
• No Backups: Cloud and device backups explicitly disabled to prevent data exfiltration
• No Logging: Prompts, responses, and credentials are never logged to system logs or crash reports

7. Your Rights and Choices

You have complete control over your data:

• Access: View all your conversations, documents, and settings within the app at any time
• Export: Export conversations as text files to your device storage
• Delete: Clear conversation history, delete individual messages, or remove uploaded documents at any time
• Offline Mode: Enable "Offline-Only Mode" in settings to block all network access for MCP tools
• Revoke Credentials: Sign out of Hugging Face, delete MCP server configurations, or uninstall the app to remove all data

8. Children's Privacy

PocketGem Agent is not directed to children under 13. We do not knowingly collect information from children under 13. The app is designed for general-purpose AI assistance and requires understanding of technical concepts like LLMs, MCP servers, and RAG.

9. Data Retention

Your data is retained on your device until you:

• Clear conversation history within the app
• Delete individual messages or documents
• Uninstall the app (permanently deletes all local data, models, and credentials)

There is no cloud storage or server-side retention. Once data is deleted from your device, it cannot be recovered.

10. International Users

PocketGem Agent operates entirely on your device. Since we do not collect or transmit your conversational data to our servers, there are no international data transfer concerns for core AI functionality. If you use optional network features (Hugging Face, MCP servers, web search), you are subject to those services' data processing practices.

11. Open Source and Transparency

PocketGem Agent's source code is available for review. You can verify our privacy claims by inspecting the code. We believe in transparency and encourage security researchers to audit our privacy practices.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

---

© 2025 VaneSpark. All rights reserved.