Privacy, in plain language.

1. The short version

Optional online features connect directly from your device to the service you choose. Before a prompt-derived search or weather request is sent, ilmora names the provider, explains the data, and follows your Always ask, Allow, or Never allow setting.

2. Information stored locally

To provide app functionality, ilmora stores the following on your device:

• conversation text, titles, timestamps, and assistant instructions;
• your selected model and interface preferences;
• GGUF and optional speech/image model files you choose to import or download;
• documents you import and locally extracted text;
• locally generated images, audio, and their metadata;
• online-feature modes and provider approvals;
• conversation export files you explicitly create.

The app developers do not receive this local data through an ilmora server. Android’s operating-system protections govern access to app-local storage.

3. Optional voice input

Voice input starts only when you tap the microphone control. You may use Local Whisper or Android’s configured speech recognition service.

Local Whisper records a temporary audio file, transcribes it on the device, and removes the temporary recording after transcription or cancellation. Its model is downloaded from Hugging Face only when you request it.

Voice Studio Beta can record a voice reference only after you confirm that you own the voice or have permission to use it. The reference, consent record, input text, and AI-generated audio remain in app-private storage and can be deleted in the app. Voice synthesis runs locally after its model is downloaded.

The recognition service is supplied by your device or another installed provider—commonly Google Speech Services. Its handling of audio, diagnostics, and recognized text is governed by that provider’s settings and privacy policy. Some providers support on-device recognition; others may require a network connection.

Recognized text is placed in the message composer. It becomes part of local conversation history only if you send it.

4. Optional online features

Local chat is the default. Online knowledge search, current-information lookup, weather, and model downloads have separate locally stored controls: Always ask, Allow, or Never allow. Allow still requires confirmation before the first transfer to a named provider. You can clear remembered provider approvals at any time.

• Hugging Face: public model browsing and files you choose to download. Requests may include search terms, public repository/file identifiers, and standard network metadata. Model downloads never include conversation text.
• Wikimedia / English Wikipedia: a search phrase, limited to 300 characters, for an explicitly requested knowledge or current-information lookup.
• Open-Meteo: a place name for geocoding and the matched coordinates for current weather and a three-day forecast.

These requests go directly from your device to the named provider; they do not pass through an ilmora server. The provider receives the request and normal network metadata such as your IP address under its own privacy policy. Ilmora bounds and sanitizes returned text, asks the local model to summarize it, and shows source links. Raw provider responses are not stored in conversation history or logged by ilmora.

Wikimedia lookup is a bounded English Wikipedia search, not unrestricted web browsing or a live-news guarantee. If an online request fails or is denied, ilmora can continue using local model knowledge and warns that time-sensitive details may be outdated.

5. Device permissions and access

Microphone

Used only for voice dictation or a Voice Studio reference recording after you choose that feature. You can deny or revoke this permission in Android settings and continue typing messages.

Internet

Used for public model discovery/downloads and optional online tools after the applicable user action and settings. The configured Android speech provider may also use its own remote service. Core GGUF inference, local documents, Local Whisper transcription, Voice Studio synthesis, and installed local image generation do not require an ilmora server.

Bluetooth

Allows speech recognition to work with a connected Bluetooth headset where supported by Android.

Files

Android’s system file picker lets you choose GGUF models, supported documents, conversation backups, or a destination for generated images. ilmora does not request broad legacy storage access.

6. Data collection and sharing

Ilmora does not collect or store your AI conversations, files, audio, images, or inference data on Ilmora servers. ilmora itself does not sell personal information or collect advertising identifiers, contacts, usage analytics, or telemetry.

When you choose an optional online provider or external speech recognition provider, that provider may process the data described above. When you choose a third-party model, its outputs are generated locally, but its license, quality, and behavior remain the model publisher’s responsibility.

7. Your controls and retention

• Delete individual conversations in the conversation manager.
• Export or import conversation backups as JSON.
• Remove imported models through your device’s file/app storage controls.
• Delete imported documents, downloaded models, and locally generated outputs in the app.
• Change online modes or clear saved provider approvals in Online features.
• Revoke microphone or Bluetooth permissions in Android settings.
• Uninstall the app to remove app-local data, subject to Android backup and uninstall settings.

Exported files exist outside the in-app conversation list and must be deleted separately if you no longer want them.

8. Children

ilmora is a general-purpose AI tool and is not directed to children. We do not knowingly collect children’s personal information through an ilmora service. Parents and guardians should supervise use of third-party models and speech providers.

9. This website

This static website does not set cookies, run analytics scripts, or submit forms. Most assets are served locally. The Product Hunt badge is loaded from api.producthunt.com, so Product Hunt may receive standard web request data such as your IP address, browser information, and referrer. If you follow a link to Google Play, Product Hunt, or another site, that site’s own privacy practices apply.

10. Changes to this policy

We may update this policy when app behavior or features change. The date at the top identifies the latest published version.

11. Contact

Questions or concerns can be sent to ilhamlabs.ai@proton.me.