Privacy Policy

Last updated: September 3, 2026

Ownode runs the AI on a computer you already own. Your prompts and the replies to them are encrypted on your iPhone, decrypted only by your own computer, and are never stored on our servers in any readable form.

We have no user accounts, we do not sell data, we run no advertising, and we have no way to read your conversations.

What stays on your device

Your conversation history lives in a database on your iPhone. It is not uploaded, backed up to us, or synced through us. Deleting a conversation in the app deletes it. Deleting the app deletes all of it.

• Messages you send and replies you receive, including their full history.
• Photos you attach to a message. They are encrypted to your computer for that message and are not retained by us at any point.
• The pairing details for your computers, including the cryptographic keys that identify them.

How your computer and your phone talk

When both are on the same Wi-Fi, your iPhone connects directly to your computer and nothing passes through us at all.

When you are away from home and you have turned on remote access, traffic is routed through a relay service we operate. Every message is encrypted end-to-end between your iPhone and your computer using the Noise protocol before it reaches the relay. The relay forwards sealed data it holds no key for. It cannot read your prompts, your replies, your photos, or your conversation titles, and neither can we.

What the relay does handle

To route a connection to the right computer, the relay necessarily processes a small amount of technical information:

• Random identifiers for your computer and your phone, generated at pairing time. They are not derived from your name, email, or hardware serial numbers.
• Public keys used to verify that a connecting device is one you paired.
• Connection metadata: that a device connected, when, and whether it authenticated successfully. Our operational logs record these identifiers and error codes only, never message content.
• IP addresses, which are inherent to any internet connection and are processed by our infrastructure provider (Cloudflare) to deliver traffic and to protect the service from abuse.
• A push notification token, if you enable notifications. See below.

We do not store prompts or responses on the relay, in any form, encrypted or otherwise.

Notifications

If you enable notifications, we store a token supplied by Apple so we can tell your phone that a reply has finished while you were away. The notification text is a fixed string and never contains any part of your prompt or the response. You can turn notifications off at any time in iOS Settings.

Camera and photos

• Camera is used only to scan the pairing code displayed by Ownode Home on your computer. Nothing is recorded or uploaded.
• Photo library is accessed only when you choose a picture to send. The picture is encrypted to your own computer. We never receive it.

Purchases

Ownode Plus is sold through Apple's In-App Purchase. Apple processes the payment; we never see your card details. We use RevenueCat to verify the purchase receipt and to tell the app whether Plus is active. Because Ownode has no accounts, your subscription is associated with an anonymous identifier for your device and your Apple ID, not with a name or an email address.

Crash diagnostics

We may collect anonymous crash and error reports through Sentry so that we can fix bugs. These contain technical information such as the error, the app version, and the device model. They do not contain your messages, your photos, or the contents of any conversation.

What we do not do

• We do not require, or offer, an account. There is no email address or password to give us.
• We do not sell or rent personal information to anyone.
• We do not run advertising and do not use advertising or cross-app tracking identifiers.
• We do not train any AI model on your conversations. The model runs on your computer and is yours; we have no access to it or to what you ask it.

Retention and deletion

• On your phone: delete an individual conversation in the app, or delete the app, and the data is gone.
• On the relay: unpairing a phone in Ownode Home removes its authorisation and its push token. Pairing records are short-lived by design and expire on their own.
• Operational logs containing the identifiers described above are retained for a limited period for reliability and abuse prevention, then discarded.

You can also ask us to remove any record associated with your computer or device identifiers by contacting us at the address below.

Children

Ownode is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will be surfaced in the app.

Contact us

If you have questions about this Privacy Policy or your data, contact us at support@petalformllc.com.