Privacy Policy

Last updated: March 11, 2026

1. Introduction

OneChats Inc. ("OneChats," "we," "our," or "us") is committed to protecting the privacy of individuals who use our mobile application and related services (collectively, the "Services"). This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of information when you access or use our Services.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to this Privacy Policy, please discontinue use of our Services immediately.

2. Information We Collect

OneChats is designed with a privacy-first, on-device architecture. We minimize data collection to protect your privacy.

2.1 Information Stored Locally on Your Device

  • Conversation Data: All chat histories, prompts, and AI-generated responses are stored on your device's local storage. We do not transmit, access, or retain any of your conversation data on our servers. However, when you send a message, your chat content is transmitted directly from your device to the third-party AI provider you have selected (see Section 5 for details).
  • Authentication Credentials: API keys and authentication tokens for third-party AI services (including but not limited to OpenAI, Anthropic, Google, and other providers) are encrypted and stored in your device's secure keychain or equivalent secure storage mechanism. These credentials never leave your device and are not accessible to OneChats.
  • User Preferences: Application settings, theme preferences, and configuration options are stored locally on your device.
  • iCloud Sync Data (Optional): If you enable iCloud sync, conversation metadata (such as thread titles and timestamps), agent configurations, and favorites may be synced via Apple's CloudKit service. The sync is governed by Apple's privacy policy and your iCloud account settings. Chat message content is not synced to iCloud.

2.2 Information We May Collect

  • Device Information: We may collect non-personally identifiable device information such as device type, operating system version, and app version for the purpose of providing technical support and improving our Services.
  • Crash Reports: With your consent, we may collect anonymized crash reports and diagnostic data to identify and resolve technical issues.
  • Usage Analytics: We may collect aggregated, anonymized usage statistics to understand how our Services are used and to improve user experience. This data cannot be used to identify individual users.

3. How We Use Information

Due to our privacy-first architecture, we have extremely limited access to user data. Any information we may collect is used solely for the following purposes:

  • Providing, maintaining, and improving our Services;
  • Responding to your inquiries and providing customer support;
  • Detecting, preventing, and addressing technical issues, fraud, or security concerns;
  • Complying with legal obligations and enforcing our Terms of Service.

We do not use your data for advertising, marketing profiling, or AI model training purposes. Your conversation data remains exclusively under your control.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following limited circumstances:

  • Service Providers: We may engage trusted third-party service providers to assist in operating our Services, subject to strict confidentiality obligations.
  • Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
  • Protection of Rights: We may disclose information to protect the rights, property, or safety of OneChats, our users, or others.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of such transaction, subject to the same privacy protections.

5. Third-Party AI Services

OneChats supports both cloud-based AI models and local on-device models.

5.1 Local Models (On-Device)

When you use local models (e.g., models downloaded and run via MLX on your Mac), all data is processed entirely on your device. No chat messages, images, or any other data is transmitted to any external server. Your conversations remain completely private and never leave your device.

5.2 Cloud Models (Third-Party AI Services)

OneChats allows you to connect to third-party cloud AI services using your own API keys. When you send a chat message using a cloud model, the following data is transmitted directly from your device to the AI provider you have selected:

  • Chat messages: The text content of your conversation, including your input and prior messages in the conversation thread (used for context).
  • Attached images: If you attach images to a message, the image data is sent to the AI provider for processing.
  • System prompts: Any custom agent instructions or system prompts you have configured.

This data is sent directly from your device to the third-party AI provider — it does not pass through OneChats servers. You authenticate with each provider using your own API key, which means you have a direct relationship with that provider.

OneChats does not control how third-party AI providers process, store, or use the data you send to them. These interactions are governed by the privacy policies and terms of service of the respective providers. We strongly recommend reviewing their privacy practices:

By configuring an API key and sending messages, you consent to your chat data being transmitted to the selected AI provider. You may revoke this consent at any time by removing the API key from the application settings.

OneChats is not responsible for the privacy practices or data handling of third-party AI service providers. Each provider listed above maintains its own data protection standards.

6. Data Security

We implement industry-standard technical and organizational security measures to protect the limited information we process. These measures include encryption, secure data transmission protocols, and access controls.

Your locally stored data benefits from the security features of your device's operating system, including device encryption and secure keychain storage for sensitive credentials.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

Since conversation data and credentials are stored locally on your device, data retention is under your direct control. You may delete your data at any time by:

  • Clearing conversation history within the application;
  • Removing stored API keys from the application settings;
  • Uninstalling the application from your device.

Any anonymized analytics data we collect is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

  • The right to access, correct, or delete your personal information;
  • The right to restrict or object to certain processing activities;
  • The right to data portability;
  • The right to withdraw consent where processing is based on consent;
  • The right to lodge a complaint with a supervisory authority.

To exercise these rights or for any privacy-related inquiries, please contact us using the information provided below.

9. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can take appropriate action.

10. International Data Transfers

If you access our Services from outside the jurisdiction where we operate, please be aware that information may be transferred to, stored, and processed in jurisdictions with different data protection laws. By using our Services, you consent to such transfers.

11. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, providing additional notice through the application or via email.

Your continued use of our Services following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

OneChats Inc.
Email: [email protected]