Privacy Policy

Last updated: 2026-05-12

Our one-line promise

Local Pocket does not collect, store, or transmit any personal data. Everything you do happens on your device, and stays on your device.

What runs locally

All of Local Pocket's core functionality — model inference, document indexing, search, knowledge graph, chat history, settings — runs on your Mac and writes only to ~/Library/Application Support/Local Pocket/.

What touches the network

Local Pocket makes no outbound network requests by default. The following network calls happen only when you actively opt in:

  • Model downloads — when you install or change a model, the application fetches the GGUF file from huggingface.co (or a mirror you configure).
  • Sparkle update check — once a day, on launch, Local Pocket checks updates.localpocket.app/stable/appcast.xml for new releases. You may disable auto-checks in Settings.
  • Web search (optional) — if you enable web search for a chat, queries are sent to DuckDuckGo's HTML endpoint. We do not proxy, log, or store these queries.
  • Wikidata enrichment (optional) — entity-resolution for names and places fetches public data from wikidata.org when enabled.
  • Integrations you enable — Gmail, Calendar, Apple Health, and Wealth integrations contact their respective providers only when you explicitly authorize them.

No telemetry, ever

We do not ship any analytics SDK, crash reporter, or "anonymous usage statistics" feature. The application contains no tracking pixels, no fingerprinting, and no client identifier.

This website (localpocket.app) likewise contains zero third-party requests, zero analytics, and zero cookies — first-party or otherwise. You can verify both in your browser's Network panel.

Third-party services you can enable

When you connect Gmail, Apple Calendar, Apple Health, or other integrations, those providers see your requests directly and apply their own privacy policies:

  • Google Gmail / Calendar — OAuth grants you control; revoke at myaccount.google.com/permissions.
  • Hugging Face Hub — used only when downloading model files.
  • DuckDuckGo — used only when web search is enabled per chat.

GDPR — Your data-subject rights

Because Local Pocket collects no personal data on any server we operate, requests under Articles 15–21 of the GDPR (right of access, rectification, erasure, restriction, portability, objection) are honored by:

  • Access / portability — open your ~/Library/Application Support/Local Pocket/ folder. All your data is there in ObjectBox + JSON form. Use Settings → Backup to export an encrypted zip.
  • Rectification — edit any record from the application UI.
  • Erasure — quit the app, delete the folder above and the application from /Applications. We hold nothing on your behalf, so nothing remains to delete.
  • Objection / restriction — uninstall the application or disable specific integrations in Settings.

If you would still like to confirm in writing that we hold no data on you, email privacy@localpocket.app and we will respond within 30 days.

CCPA / CPRA — Your California rights

Categories of personal information collected: none. Categories sold or shared: none. Categories used for cross-context behavioural advertising: none. We do not sell or share personal information; the "Do Not Sell or Share My Personal Information" right is automatically honored by default because there is nothing to sell or share.

The CCPA / CPRA / VCDPA / CPA / CTDPA all follow the same default. To receive written confirmation, email privacy@localpocket.app.

Children's privacy

Local Pocket is intended for users aged 13 and older. We do not knowingly target children under 13, and because we collect no data, we cannot inadvertently collect data from anyone.

Cookies on this website

None. This site sets no first-party cookies, runs no third-party scripts, and uses no analytics. No consent banner is required.

If we ever add paid services

Local Pocket today is a free, open-source app that runs entirely on your device. We may eventually add paid services — like cloud sync between your own devices, or a hosted model registry — under separate commercial terms. If that happens, this policy will be amended before any new data flow is enabled, and you will always be able to opt out and continue using the free local core.

Changes to this policy

Updates to this policy are committed to the public repository at github.com/atulkapoor/local-pocket/blob/main/docs/legal/privacy-policy.md and reflected here at the next build. The "last updated" date above reflects the current revision.

Contact

Privacy questions: privacy@localpocket.app
Legal correspondence: legal@localpocket.app