# Privacy Policy This page explains what data Dolaima touches, where that data goes, what is stored on your phone, and how to delete it. **In one sentence**: Dolaima **runs no server of its own**. It collects no data, sends no analytics, and shows no ads. Your code and your conversations go only to the model provider **you** configure. _Last updated: 2026-09-29_ ## 1. What is sent to your model provider Dolaima is an AI coding assistant: its whole job is handing context to a large language model. The following is sent over HTTPS to **the provider you entered in Settings** (both the base URL and the API key are yours -- it can be DeepSeek, OpenAI, Claude, Gemini, OpenRouter, a server you run yourself, or a local model on your phone): | What | Notes | |---|---| | Your prompts | The text you type on the Chat page | | Conversation history | The context accumulated in this session, including compacted summaries | | File contents it read | The **body of files** the agent read with its tools | | Command output | stdout/stderr from commands it ran | | Images / audio | Only when you use photo input or speech-to-text | | System prompt | Generated by the app (includes project structure and similar) | WARNING: **it decides which files to read**. If your workspace contains keys, certificates or `.env` files, the model may read them and send them to the provider. Keep sensitive files out of the project, or switch to **Plan mode** (read-only) first. **Who receives it is entirely up to your configuration.** We do not relay, proxy or re-upload anything, and we **cannot see** this content -- the API key and the provider account are yours. ## 2. Other network requests Apart from your model provider, these features reach the network, and only **when you (or the agent) actually use them**: | Feature | Goes to | Sends | |---|---|---| | Web search | A search engine | Your search keywords | | Fetch page / download | A URL you or the agent specify | An HTTP request | | Speech-to-text | The Whisper-compatible endpoint you configured | The audio to transcribe | | MCP servers | Servers you configured yourself | Determined by that protocol | ## 3. What is stored on your phone All of it stays **on the device**; none of it is uploaded to us (we have no server to upload to): | What | Where | |---|---| | API keys | `api_keys.json` in the app's private directory (**plain text, not encrypted**) | | Settings, connections, model choice | Config files in the app's private directory | | Sessions and memory | `sessions/`, `memory/` in the app's private directory | | Your code and projects | The workspace directory (see below) | **Where the workspace lives**: by default inside the app's private directory. On Android, if you grant "All files access", the workspace and config move to a `waycoder/` directory in external storage, so other file managers can see the code you write. On iOS it always stays inside the app's private directory. WARNING: **the key is plain text**. Anyone who can read that storage on this device can read it. Do not keep production keys on a shared device. ## 4. Phone permissions we request | Permission | When we ask | What it is for | |---|---|---| | Camera | When you tap "Take photo" | Photograph something for the AI to look at | | Photos | When you tap "Pick image" | Choose an existing image for the AI to look at | | Microphone | When you tap "Voice input" | Turn your speech into text | | All files access (Android only) | When you enable it in system settings | Put the workspace in external storage so other apps can open your code | We ask only when the feature is used, and declining still leaves everything else working -- only that one feature becomes unavailable. ## 5. No telemetry Dolaima contains no analytics, no crash reporting and no advertising SDK. The only outbound check is the version update query **you trigger yourself**; it reads a version number and sends nothing about your device. ## 6. Reducing what leaves the device, and deleting it - Use **Plan mode** (read-only, no file changes) in sensitive directories; use **Chat mode** (no tools at all) for pure conversation. - To keep data off the network entirely, point the provider at a **local model** (for example Ollama running on your phone or computer). - **Deleting your data**: uninstalling the app erases everything in its private directory (keys, sessions, settings). If you enabled "All files access", the workspace is in external storage and you need to delete the `waycoder/` directory yourself. ## 7. Children and age Dolaima is intended for developers with a basic programming background. It is **not directed to children under 13**, and we do not knowingly collect information from them. The store age rating is **13+**. If you are under 18, please use it with a guardian's consent -- and make sure you have permission before entering a model provider's API key, since the charges from that key are billed to the account holder. ## 8. Contact Questions, bug reports and privacy concerns all go to the repository issue tracker: You can also email . This policy is also published at: