Cloaked — Private LLM Chat

Cloaked does not collect any information from you. Specifically:

• No personal information. Cloaked does not require an account, email address, name, or any form of registration.
• No usage analytics. We do not track how you use the app, which features you access, how often you open it, or how long you use it. There is no anonymized telemetry of any kind.
• No conversation data. Your prompts, messages, and AI responses are never transmitted to any server. All conversations are processed and stored entirely on your device.
• No device identifiers. We do not collect your device ID, advertising identifier, IP address, or any other device fingerprinting information.
• No crash reports. We do not use third-party crash reporting services. No diagnostic data is sent from the app.

Cloaked stores the following data locally on your device within the app's private sandbox. This data is only accessible to Cloaked and is never transmitted anywhere.

• Conversations. Your chat history, including messages you send and responses generated by the AI model.
• Projects. Any projects you create, including their names, icons, and associated system prompts.
• Memory. If you use the memory feature, the personal information you choose to provide is stored locally and used to personalize AI responses on your device.
• Settings. Your preferences such as theme, accent color, temperature, response length, and voice settings.
• Downloaded models. AI model files you download are stored in the app's local storage on your device.

All of this data is stored using Apple's SwiftData framework within the app's sandboxed container. No other app can access it. You can delete all of this data at any time from within the app, or by deleting the app from your device.

Cloaked makes network connections only for one purpose: downloading AI models.

When you choose to download a model, the app connects to Hugging Face (huggingface.co) to retrieve the model files. During this download:

• Your device's IP address is visible to Hugging Face as part of the standard HTTPS connection. This is inherent to how the internet works and is not something Cloaked controls.
• No account credentials, personal data, conversation history, or device identifiers are sent to Hugging Face by Cloaked.
• Once a model is downloaded, no further network connection is needed. The app functions fully offline.

Cloaked does not connect to any other servers, APIs, or services. There are no background network calls, no update checks initiated by the app, and no “phone home” behavior.

All AI inference happens locally on your device using Apple's MLX framework, which is optimized for Apple Silicon. Your prompts are processed by the AI model running on your iPhone or iPad's processor. No data is sent to the cloud for processing.

Similarly, if you use voice input, speech recognition is performed entirely on your device using Apple's on-device speech recognition. Audio from the microphone is not transmitted to any server. Text-to-speech output is also generated locally using Apple's on-device synthesis.

Cloaked may request the following permissions, both of which are optional and used entirely on-device:

• Microphone. Required only if you use voice input. Audio is processed on your device by Apple's speech recognition engine and is never recorded, stored, or transmitted.
• Speech Recognition. Required only if you use voice input. Cloaked explicitly uses on-device recognition only. No audio data is sent to Apple or any third party.

You can revoke these permissions at any time in your device's Settings without affecting any other functionality of the app.

Cloaked does not integrate any third-party analytics, advertising, crash reporting, or tracking SDKs. The only third-party interaction is the HTTPS connection to Hugging Face for model downloads, as described above.

The AI models available in Cloaked are open-source models created by third parties including Meta (Llama), Alibaba (Qwen), Google (Gemma), Microsoft (Phi), and DeepSeek. These models run entirely on your device. Using them does not create any connection to their respective creators.

Cloaked does not collect personal information from anyone, including children. Because no data is collected, the app complies with the Children's Online Privacy Protection Act (COPPA) and similar regulations by design.

Since all data is stored locally on your device:

• You can delete individual conversations from within the app.
• You can clear all memory data from Settings.
• You can delete downloaded models from the Models screen.
• You can delete all app data by deleting Cloaked from your device.

There is no server-side data to request deletion of, because no data is ever sent to a server.

Cloaked does not transfer any data across borders because it does not transfer any data at all. All processing and storage occurs on your local device, making it compliant with data residency requirements by design. No provisions of the GDPR, UK GDPR, or other international data protection laws regarding data transfers apply, as there is no data collection or processing by the developer.

If we update this privacy policy, we will post the revised version at this URL and update the “Last updated” date. Because Cloaked does not collect contact information, we cannot notify you directly. We recommend reviewing this page periodically.

Any future version of Cloaked that changes the app's data practices (such as introducing analytics or cloud features) will clearly disclose those changes in the App Store release notes and in an updated version of this policy before they take effect.

The AI models available through Cloaked are open-source models developed by third parties. Cloaked provides these models as a convenience and does not control, modify, or filter the outputs they generate. AI model responses may be inaccurate, incomplete, or inappropriate. Cloaked is not responsible for the content generated by these models.