IOTA Mobile Privacy Policy

Effective October 21, 2026. Published by Iota LLC.

The short version

IOTA Mobile runs an AI model on your phone. There are no accounts, no ads, no analytics, no tracking, and no IOTA servers. Your chats and memory stay on your phone.

What stays on your phone

• Chats. Kept only while the chat is open, unless you turn on Memory and Save chats. Saved chats are stored in the app's private storage.
• Permanent memory. Facts you choose to save. Stored in the app's private storage.
• Settings. Stored in the app's private storage, including an optional search key you paste in Developer settings.
• Response reports. If you report a reply, the report is saved in the app's private storage.
• AI models. The model files you choose to download (0.7 to 2.8 GB each), stored in the app's private storage.
• Skills. The skill files you choose to install (a few KB each) and which ones are on. Stored in the app's private storage. Skills run on the phone and never send your messages anywhere.

None of this is sent to Iota LLC. Android backup is turned off for this app, so this data is not copied to cloud backups. Uninstalling the app deletes all of it. You can also delete chats, memory, and reports inside the app at any time.

When the app uses the network

IOTA Mobile only connects to the internet in these cases:

1. Model downloads. When you download a model, on first run or in Settings > Models, the app fetches the file from Hugging Face (huggingface.co and its file delivery servers). Hugging Face receives a normal web request, which includes your IP address. No chat content is sent.
2. Web search, only when you turn on Online. Online is off by default. When you turn it on, IOTA can search the web and read pages to answer you:
3. When a message needs current or specific facts, the app decides on the phone to search. Search queries, which the app writes from your message and the recent conversation (for example, a company name and city), are sent to DuckDuckGo (html.duckduckgo.com, with lite.duckduckgo.com as a backup). If DuckDuckGo returns nothing, the query is sent to Wikipedia search (en.wikipedia.org).
4. If you paste your own Brave Search API key in Developer settings, searches go to Brave Search (api.search.brave.com) first. This is optional and off unless you add a key.
5. IOTA reads the top two or three result pages, or a link in your message, to answer from them. Those websites receive a normal web request, including your IP address.
6. Web content is never saved to memory automatically.
7. Pictures and videos. When you ask for pictures (or a picture would help), the app sends a short search query to Wikimedia Commons (commons.wikimedia.org) or Wikipedia, then loads the images from Wikimedia's image servers (upload.wikimedia.org and thumb.wikimedia.org). When you ask for videos, the app runs a normal web search limited to youtube.com, asks YouTube (www.youtube.com/oembed) for the video title, and loads the thumbnail from i.ytimg.com. Images are kept in memory only while the app runs and are not saved on the phone. Nothing loads while Online is off. Tapping a video opens it in the YouTube app or your browser, under YouTube's own privacy policy.
8. Skill library. When you open Skills or the skill library while Online is on, or tap Check for new skills or Download, the app fetches the skill list and skill files from the IOTA skill library (raw.githubusercontent.com, hosted by GitHub). GitHub receives a normal web request, which includes your IP address. No chat content is sent. Skills are data files only (text and settings), not code.

When Online is off, the app makes no network calls for chat, and it fetches skills only when you tap a button in the skill library. Each search provider and website handles requests under its own privacy policy.

Things you choose to do

• Source links. Tapping a source link opens it in your browser.
• Reporting a reply. Reports are saved on your phone. If you tap "Email report", your email app opens with a draft addressed to the developer. Nothing is sent unless you press Send in your email app.

What we do not do

• No accounts or sign-in.
• No ads or ad SDKs.
• No analytics, crash reporting, or tracking SDKs.
• No selling or sharing of personal data.
• No IOTA servers. Iota LLC never receives your chats or memory.

Children

IOTA Mobile is not directed at children under 13.

Changes

If this policy changes, the new version will ship inside the app and on this page with a new effective date.

Contact

Iota LLC: IOTA.LLC.Business.Inquiries@gmail.com