Privacy Policy

1. Introduction

This Privacy Policy describes how OfflineGPT (“the App”) handles information when you use the App on Android, and how we handle information when you visit this policy on codealp.ch/privacy-offlinegpt (“Website”).

The related iOS app is listed on the App Store as Offline AI Studio; it has a separate privacy policy. Principles match; details follow each platform.

OfflineGPT is built offline-first: the default path is local AI on your device. The App also offers optional online features (such as connecting to external AI providers with your API keys, web search, downloading models, or OfflineGPT Private Cloud). You decide whether to use them. Private Cloud is used only when you select it.

2. Responsible Entity / Contact

Controller / responsible entity: CodeAlp Responsible person: F. B. (natural person) Contact (privacy): info@codealp.ch

3. Scope of This Policy

This policy covers the OfflineGPT app for Android (Google Play) and this Website. It does not replace the privacy policies of third-party services you choose to use (for example OpenAI, Google, or a search engine when you enable those features in the App).

4. What CodeAlp actually receives

Core on-device use: Chats, generated text and images, imports, OCR results, transcriptions, and tool outputs are processed and stored on your device. CodeAlp does not collect copies of that content on our own servers for that mode of operation. We are not “syncing” your private threads to ourselves.

Why privacy policies still mention “personal data”: If you type your name or personal notes into the App, that content is personal to you—but it remains on your device unless you use an optional online feature that sends it somewhere else. We describe this so we are honest with regulators; it does not mean CodeAlp secretly accesses it.

We may receive limited information in these situations:

• You email us (e.g. support)—we receive what you put in that message.
• In-app purchases—Google Play Billing handles payment on Android; we may receive non-payment-card signals from the store needed to confirm a Private Cloud subscription (see Section 9).
• OfflineGPT Private Cloud—if you explicitly select it, the OfflineGPT Gateway receives the request in order to verify the subscription and allowed model, then forwards it to Infomaniak AI Services. Prompt and response bodies are processed transiently in memory and are not retained as chat content (see Section 6).
• This Website—like any website, hosting can create basic technical logs when you load a page (see Section 12).

5. On-device processing (default)

When you use local models and local tools, processing happens on your device. That includes, depending on your settings: chat history, on-device text and image generation, OCR, speech-to-text where implemented on-device, safety checks where implemented on-device, settings, and downloaded model files.

CodeAlp has no remote access to that local data. Uninstalling the App or clearing app data removes it from your device according to Android’s rules—we cannot remotely wipe or read your chats.

6. Optional internet use (your choice)

Some features need a network connection. Examples: downloading or updating models, optional web search, using an external AI provider with your own keys, or OfflineGPT Private Cloud. You choose whether to use these; they are not required for core offline-style use after models are installed.

OfflineGPT Private Cloud: If you explicitly select Private Cloud, the App sends the request over HTTPS to the OfflineGPT Gateway operated by CodeAlp. The Gateway verifies the active subscription and the allowed model, then forwards the request to Infomaniak AI Services for inference in Swiss data centers. The generated response is streamed back to the App. The Gateway necessarily processes prompt and response data transiently in memory while forwarding. OfflineGPT does not persist prompt bodies, response bodies, cloud conversation histories, or uploaded content as a personal cloud library. Requests are not used to train models.

Infomaniak states that submitted AI requests are not stored and that prompts are not used to train models or improve its services. See Infomaniak AI Services. Optional web search, external APIs, or networked Python operations may send relevant data to those services under their own terms when you enable or invoke them.

7. External AI providers (your API keys)

If you enable optional cloud providers and enter your own API keys (for example OpenAI, DeepSeek, Gemini, Groq, Mistral, xAI, OpenRouter, or a custom compatible endpoint), requests go from your device directly to that provider (or the URL you configured). For that path, CodeAlp does not sit in the middle as a data processor of those chats—we do not run the inference backend for those providers. This is separate from OfflineGPT Private Cloud, which uses the OfflineGPT Gateway when you select it.

Your keys are stored on your device as part of the App configuration. What you send (prompts, attachments, etc.) is then handled under that provider’s terms and privacy policy. You are responsible for choosing providers you trust and for complying with their rules.

We do not control how a third party logs, stores, or trains on data sent to them—check their documentation.

8. Web search and websites

If you use optional web search, your query may go to a search engine (such as DuckDuckGo or another engine as implemented). The App may fetch public web pages to summarize or extract content. That traffic is between your device and those services—not a hidden pipeline to CodeAlp for your chat history.

9. In-app purchases

On Android, the current paid offer is the OfflineGPT Private Cloud subscription through Google Play Billing. Payment card data is handled by Google, not by us. We do not receive your full card number. We may receive limited store signals to confirm the subscription, plus technically necessary billing, access, and operational metadata (for example an anonymous entitlement identifier, access state, validity period, and aggregate usage or abuse-prevention information). That metadata is not your chat and does not contain persistently stored prompt or response bodies. There is no one-time Pro purchase as the current sales model.

See Google’s Privacy Policy.

10. Permissions

The App may ask for microphone (voice input), camera (capture), and photos/files (import)—for the features those permissions serve. For local features, processing stays on the device. Content only goes to a third party if you use an optional online provider or web feature that sends it.

11. Storage on your device

The App keeps data locally: chats, outputs, settings, models, API configuration, keys, and purchase state as shown in the App. Third-party model files have their own licenses (see in-app or separate license information).

You can delete data via system settings or by uninstalling.

12. Third parties and this Website

Google Play: provides the store and purchase flows for this Android app.

Infomaniak AI Services: When you select OfflineGPT Private Cloud, inference is provided by Infomaniak in Swiss data centers after the OfflineGPT Gateway forwards the request.

Providers you turn on: Only when you use optional cloud or web features do those companies receive what you send, as explained above.

Website hosting: Visiting codealp.ch may generate standard technical logs (e.g. IP address, time, page) at the hosting layer. We do not use those logs to reconstruct your App chats—we do not have your App chats on the server in the first place for local use.

13. Legal bases (EEA / UK)

Where EU/UK law applies, we rely on appropriate grounds—for example contract and legitimate interests for providing the App, the Website, and support, and for purchase validation through Google Play. Optional online features you activate may involve consent or contract with third parties under their terms.

14. Your rights

For information held only on your device, you manage it yourself (delete app data, uninstall). We generally cannot export or erase that from afar because we do not hold a copy.

For personal data we do hold (such as support emails or purchase-related records available to us), you may have rights under applicable law (access, correction, deletion, objection, complaint to a supervisory authority). Contact us at info@codealp.ch—we aim to reply within two business days when reasonable.

15. Children’s privacy

The App is not aimed at young children. We do not knowingly collect children’s information beyond what is unavoidable in ordinary support or store processes. If you believe there is a problem, contact us.

16. Security

Local data is protected by your device (passcode, OS sandbox). You choose whether to store API keys in the App. No system is perfect; use device security and trusted networks when you enable online features.

17. Changes

We may update this policy. The current text is always at codealp.ch/privacy-offlinegpt. Material changes may be announced in the App or on the site where appropriate.

18. Contact

info@codealp.ch