Privacy policy.

KernelAI is a mobile app. It downloads open-weight AI models and runs them on your device, so ordinary chat, document analysis, image analysis and voice transcription happen on your hardware and not on a server of ours.

This policy covers that app and what it does with what you put into it. The models were built and trained elsewhere, by the organisations that published them.

Conversations and downloaded models sit in the app's own storage, behind the passcode and device lock that already protect your phone.

The app does not sync your conversations to a cloud service or to a server of ours. Deleting a model frees the space it took, and deleting the app removes what it kept. We have no copy to delete for you, because we never received one.

The models are open-weight files published by other organisations, each under its own licence. Downloading one fetches the file from Hugging Face. The request exposes the standard connection information needed to deliver a file, such as your IP address, to Hugging Face. It does not include your chats or attached files. After download, the model stays on your device and can answer without a network connection.

Web search is off by default. If you turn it on and add your own Tavily or Exa API key, KernelAI sends a short, model-generated search query directly to the provider you selected. Your key is stored in secure device credential storage and sent only to that provider to authenticate the request. KernelAI does not send your full conversation or attachments with it.

A search query can reflect what you asked, so do not put personal or sensitive information into a web-search request unless you want the selected provider to process it. The provider handles the query and standard connection information under its own privacy policy. Turning web search off or removing the key stops future search requests.

When KernelAI displays search sources, it may load an icon directly from a source website. That website receives the standard connection information required to return the icon, such as your IP address. KernelAI does not use an intermediary icon service.

The production app sends limited technical diagnostics to Sentry so we can find reliability and performance problems. These diagnostics can include an error type and stack trace, app version and build channel, device model, operating-system version, locale, memory status, diagnostic breadcrumbs and sampled performance timing.

KernelAI disables default personally identifying information and IP-based location inference. Before an event is sent, it filters query strings, URL secrets, local file paths and model filenames. Prompts, conversation content, attached files, transcription content and API keys are not intentionally included.

We use this information only to investigate reliability and performance, not for advertising or behavioural analytics. We keep it only for as long as it is needed for that purpose, then delete it. Because KernelAI has no account and these diagnostics are not tied to an identity, we may be unable to identify a particular event as yours; you can still contact us with a deletion or privacy request.

KernelAI is distributed through the Apple App Store, with Google Play coming soon. Each store handles its own download information on its own terms, and we have no access to it.

The app has no account, no sign-in and no contact field, so it asks a child, or anyone else, for nothing. Downloading it is subject to the applicable store's age restrictions.

This policy can change. A new version is posted here with a new date at the top. The app holds no address for you, so we cannot send a notice, which makes the date the thing to check.

Questions about this policy can go to either of these.