Privacy Policy

Last updated: April 14, 2026

The short version: Your captures, notes, and memories stay on your device, encrypted by your PIN. We collect anonymous usage data (which you can turn off) to make the app better. We only ask for an account when you want your memory to persist across devices or sessions.

Your personal data

Everything you capture with Pocket Agent — voice notes, photos, typed entries, reminders, and the memory the app builds about you — stays on your device.

All captures are encrypted with AES-256-GCM using a key derived from your PIN via PBKDF2.
On mobile, the encryption key is stored in the device's secure enclave (iOS Keychain / Android Keystore) and never exported.
On the web version, the key is derived from your PIN each session and held only in memory.
We don't have a copy of your PIN, your encryption key, or any of your captures on our servers.

Anonymous telemetry

To improve the app and catch bugs quickly, we collect anonymous usage data:

Usage patterns: Which screens are visited, how often features are used, broad interaction metrics.
Crash reports: Stack traces and device information when the app crashes, so we can fix it.

This telemetry is anonymous. It contains no captures, no personal data, no identifiers we can tie back to you personally. You can disable telemetry entirely in Settings at any time, and the app will work exactly the same.

Your PIN

We ask you to create a PIN when you first open the app. The PIN serves two purposes:

It secures the app — no one can open your memory without it.
It derives the encryption key that decrypts your data on the device.

Your PIN is never sent to us. If you forget it, there is no recovery mechanism — your encrypted data becomes unreadable, by design.

Accounts (when you need one)

You can use Pocket Agent fully with just a PIN — no account required — for everything that happens on a single device. We only ask you to create an account when you want to persist your memory across sessions or devices, for example:

Syncing your memory between your phone and a tablet.
Restoring your memory after reinstalling the app.
Accessing the optional cloud sync subscription.

When you create an account, your captures are still encrypted end-to-end before leaving your device. We store encrypted blobs — we can see that blobs exist for your account, but we cannot read what's in them.

The AI model

Pocket Agent uses Google's Gemma AI model, which runs entirely on your device. The model is downloaded once during first-run setup. After that, no text you capture is ever sent anywhere — all inference happens locally on your phone or in your browser.

What you can do

Disable telemetry: Turn off anonymous usage analytics in Settings → Privacy.
Export your data: Download all your captures as plain TOON files anytime.
Delete everything: Uninstall the app, or clear its data from your device. If you have an account, delete it from Settings and we'll remove the encrypted blobs from our storage.
Change your PIN: Re-encrypt your entire data set with a new PIN from Settings.

Contact

Pocket Agent is built by Dawnika LLC, registered in Delaware, USA. Questions? Email hello@dawnika.com.