Pocket LLM Privacy Policy

Pocket LLM · Effective date: 25 October 2026

Pocket LLM runs AI models on your own phone. It has no user accounts, no ads, no analytics and no server operated by the developer. The developer does not receive your chats, prompts, files, recordings or model outputs.

This policy applies to the Google Play version of Pocket LLM, including Pocket LLM Pro.

1. Who is responsible

Dinesh Soudagar (100Paths)
Pfotenhauerstraße 5, 01307 Dresden, Germany

Email: 100paths.dev@gmail.com

2. Data that stays on your phone

Everything you create in the app is stored only in the app's private storage on your phone:

• chats, prompts and model responses
• attached text files, PDFs, images, photos and audio recordings, and text extracted from them
• downloaded or imported model files
• settings, including the LAN server password

You can delete single chats in the app. Uninstalling the app deletes all of it. The developer cannot access, recover or delete this data for you.

Android's own backup feature can include chat history and settings in your device backup (for example your Google account backup), depending on your phone's backup settings. Attachments are excluded from backups.

3. Permissions

• Camera: only when you take a photo to send to the model or to read text from it.
• Microphone: only when you record audio or use dictation. Speech is transcribed on your phone.
• Notifications: to show model download progress and that the LAN server is running.
• Internet: to download models, to run the LAN server when you start it, and for web search when you turn it on.
• Foreground service and wake lock: to keep downloads and the LAN server running while the screen is off.

4. Network connections

The app connects to the internet only in these cases:

• Model downloads: when you download a built-in model or the speech-to-text model, the file is downloaded from Hugging Face (huggingface.co). Hugging Face receives the usual technical request data, such as your IP address. See the Hugging Face privacy policy: https://huggingface.co/privacy
• Hugging Face search (Pro): when you use Add from Hugging Face, the search words you type and the model you open are sent to Hugging Face to list models and files. No account is used and nothing is sent to the developer.
• LAN server: when you start it, other devices on your local network can connect to the phone with the password you set. Requests and responses stay inside your network and are not sent to the developer.
• Web search (optional, off by default): when you turn on web search, the model can look things up while answering. The search words the model chooses, which are based on your message, are sent from your phone directly to the search service you picked: Wikipedia (no key needed), or Tavily, Serper or Brave Search with your own API key. The model can also open web pages from the results, and those websites receive the request. Each service receives the usual technical request data, such as your IP address, and handles it under its own privacy policy: Wikipedia https://foundation.wikimedia.org/wiki/Policy:Privacy_policy, Tavily https://tavily.com/privacy, Serper https://serper.dev/privacy, Brave https://search.brave.com/help/privacy-policy. Your API keys are stored only on your phone. Nothing is sent to the developer.

Chat, image, document and audio processing happens on your phone and works offline once the models are installed.

5. Text recognition

The app reads text from images and scanned PDFs with Google ML Kit, which runs on your phone. Google states that ML Kit sends limited diagnostic data to Google: device information (manufacturer, model, Android version), the app's package name and version, performance metrics, API settings and event types, with a per-installation identifier that is not meant to identify you. Your images and the recognized text are not sent. See https://developers.google.com/ml-kit/android-data-disclosure

6. Pocket LLM Pro purchases

Pocket LLM Pro is sold through Google Play. Google processes the payment under its own terms and privacy policy (https://policies.google.com/privacy); the developer never receives your payment details. For each order, Google Play Console shows the developer limited order information, such as the order number, the product, the price, the date and the buyer's country. The developer uses it only to handle refunds and questions about your purchase and to meet tax and accounting duties, which can require keeping it for up to ten years (legal basis: Art. 6(1)(b) and (c) GDPR).

To know whether Pro is unlocked, the app asks Google Play on your phone which purchases belong to your Google account and stores the answer on your phone. This request goes from your phone to Google, not to the developer.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority. Because the developer does not hold any of your data, most requests can be fulfilled by you directly in the app. Contact 100paths.dev@gmail.com with any question.

8. Children

The app is not directed at children under 16.

9. Changes

If this policy changes, the new version is shown in the app and published with the app's source code.