Privacy policy
Last updated: 22 October 2026.
Alpagua is an AI chat app with no server of its own. Its author collects no data about you: no account, no analytics, no advertising, no crash reports. What you write stays on your device, except what you send, through the app, to the services you chose. This page says what leaves your device, and to whom.
Who is responsible
Alpagua is free software written by Jean-Pierre Morfin, an individual in France. For any question about this policy or your data: dev@alpagua.com.
What stays on your device
Alpagua keeps your conversations and their attachments, your notes, documents and skills, the facts its memory holds about you, your settings and its diagnostics log on your device, and nowhere else. It stays there until you delete it, or the app with it. No one else, the author included, can read it or recover it.
- API keys, passwords and tokens are kept in the system's secure storage (Keychain on Apple devices, Android Keystore, libsecret on Linux, Credential Manager on Windows), never in the app's database or its log.
- Photos you attach lose their metadata (location, device) before they are stored.
- Nothing is synchronized between your devices. To move your data, you export an archive yourself, encrypted with a password if you choose, and import it on the other device.
AI providers
The language models (LLMs) do not run inside Alpagua. They run at the provider you connect the app to: OpenAI, Anthropic, Mistral, OpenRouter, Ollama Cloud, or any compatible server. Each provider is a service you subscribe to separately, under its own terms and privacy policy, with your own API key; Alpagua only connects to it, straight from your device.
To answer, a model has to read the conversation. Each time you send a message, Alpagua sends the provider of the conversation's model:
- the conversation's messages and attachments (images, PDFs, texts), as much of the history as fits the model;
- the instructions Alpagua gives the model, with the facts of your memory when the memory tool is on;
- the descriptions of the active tools, and the results of the tools the model used (a web page it read, a note, a document).
What the provider then does with this data (how long it keeps it, whether it trains its models with it, where its servers are) depends on the provider and on your plan with it: read its privacy policy. A model run by Ollama on your computer, or on a computer of your local network, keeps everything at home.
Tools
Tools let the model act during a conversation; you choose which ones each conversation has. A tool that calls an online service sends it what the model asks of that service, and nothing else:
| Tool | Service | What the service receives |
|---|---|---|
| Web search | Tavily or Serper, as you choose, with your API key | the search |
| Web page reader | the site of the page | the request for the page |
| Wikipedia | Wikipedia (Wikimedia Foundation) | the article looked for |
| Weather | Open-Meteo, or OpenWeatherMap with your API key | the place |
| Places and distances | OpenStreetMap (Nominatim), or the server you set | the place or address looked for |
| News | the sites of the feeds | the request for the feed |
| Pexels photos, Unsplash photos | Pexels or Unsplash, with your API key | the search |
The other tools (calculator, notes, documents, memory, skills, artifacts, suggestions) work on your device only. As any request on the internet, a request shows the service your IP address; Alpagua names itself in it, as "Alpagua".
MCP servers
The MCP servers you add receive the calls of their tools, with the arguments the model gives them, which may hold content of the conversation. You approve each tool of a server, and each call asks for your confirmation unless you turn that off. A server that requires a sign-in has you sign in in your browser, with its own service.
Guest mode
Guest mode is for using the app in front of others. It hides your history and removes the tools that read personal data (memory, notes, news, the Documents folder, and the MCP servers, unless you marked a server as reading no personal data). Guest conversations are deleted the next time the app starts, and while the mode is on, the diagnostics log records no content.
Diagnostics log
To help solve a problem, Alpagua keeps a log of its exchanges with providers and servers, on your device only: secrets are masked before anything is written, contents are cut short, and its size is bounded. It is never sent anywhere by itself; you can export it, read it, and attach it to a bug report.
Permissions
- Network: to reach the providers, tools and servers you set. On iPhone and iPad, access to the local network is asked for only when you connect to a server on your network (Ollama on a computer, for example).
- Files and photos: only those you choose to attach or import, through the system's own picker.
Alpagua never asks for your location, contacts, camera or microphone.
App Store and TestFlight
Apple handles the download and installation of the app on iPhone and iPad, under its own privacy policy. On the App Store, Apple gives the author only aggregated statistics (downloads, and figures from the users who agreed to share them with developers). If you test the app with TestFlight, Apple also gives the author the e-mail address you were invited with, your installs and sessions, crash reports, and the feedback you choose to send.
The website alpagua.com
The website sets no cookies, has no analytics and calls no other site: its fonts and images come from the site itself. The light or dark theme you choose is kept in your browser, never sent.
The server that hosts the site, at OVH in France, records each request in its access log (IP address, date, page asked for, browser), for its security and to keep it working. The author uses this log for nothing else, and it is deleted after 14 days.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access the data about you, to have it corrected or erased, and to object to its processing. The author holds no data about you apart from the website's access log: for what a provider, a tool's service or an MCP server received, ask that service. For anything else: dev@alpagua.com. You may also lodge a complaint with the French data protection authority, the CNIL.
Changes
This policy changes with the app, and the date at the top of this page says when it last did. Its history is that of the file website/privacy.md in Alpagua's source code.