1. Introduction
Arbiter (“we,” “our,” “us”) is a private AI assistant for iPhone and Mac. This policy explains what information Arbiter processes and how we handle it. Arbiter is designed so that your data stays on your device by default.
2. Data Stored on Your Device
The following data is created and stored locally on your device. We do not have access to it unless you explicitly share it with us.
- Chat conversationsare stored in the app’s local database (Core Data). They never leave your device unless you choose to export or share them.
- Downloaded models(GGUF and MLX formats) are stored in Application Support within the app’s sandbox.
- Uploaded files and images (PDFs, text files, photos) are copied into the app sandbox for local processing and are not transmitted externally.
- Settings and preferences including selected model, assistant role, personalization options, theme, and server configuration are stored locally via UserDefaults.
3. Network Features
Arbiter accesses the network only for specific, user-initiated features. Core chat functionality with installed models works entirely offline.
- Model downloads: When you download a model, Arbiter fetches files from Hugging Face or other model hosts. Your IP address and standard request headers are processed by those providers under their respective privacy policies.
- Web search: When you enable the optional web search toggle, your search query is sent to our search endpoint (search.askarbiter.ai). We do not log or store search queries beyond what is needed to return results.
- Local network models:When you connect to a local-network model server (such as LM Studio, Ollama, or Arbiter’s macOS server), your prompts are sent to that server on your local network. This traffic does not pass through our servers.
- macOS model server: When you serve a model from Arbiter for macOS, other devices on your local network can send prompts to your Mac. This is a direct local connection; we do not intermediate or log this traffic.
- Tips and purchases:If you choose to leave a tip, the transaction is processed through Apple’s StoreKit infrastructure. We do not receive your payment details.
4. Analytics and Crash Data
Arbiter does not send usage analytics to us. Apple may collect crash diagnostics if you have opted in at the operating system level; those are governed by Apple’s privacy policy.
5. Third Parties
- Hugging Face and model hosts: Your IP and standard request headers may be processed by these providers when downloading models.
- Apple:StoreKit purchases and optional OS-level diagnostics are governed by Apple’s privacy policy.
- Email providers: If you contact support, your message is processed by our email provider to deliver the mail.
We do not sell your personal information.
6. Data Retention and Deletion
- On-device data: You control retention. Delete messages, models, or files within the app at any time. Uninstalling the app removes all local data.
- Support emails: We retain support messages as needed to handle your request and for reasonable business records. Email us if you want a copy or deletion.
7. Children’s Privacy
Arbiter is not directed to children under 13 (or the minimum age in your jurisdiction). Do not use the app if you are under that age.
8. Your Rights
Depending on your location, you may have rights to access, correct, or delete personal data. For app-local data, use the app or your device controls. For support communications, contact hello@askarbiter.ai.
9. Security
App data is stored within the operating system’s app sandbox on both iOS and macOS. Local network traffic between Arbiter devices stays on your network. No method of storage or transmission is 100% secure, but we use reasonable measures appropriate for a local-first application.
10. Changes to This Policy
We may update this policy. We will change the “Last updated” date at the top of this page and may provide in-app notice for material changes.
11. Contact
Questions about this privacy policy? Email us at hello@askarbiter.ai.