jack privacy policy

jack is a private, on-device ai assistant. the model runs on your phone, your conversations stay on your phone, and nothing you type or say is ever sent to us or anyone else. this policy explains what that means in practice, in plain terms.

the short version

• jack has no account, no sign-in, and no login.
• jack contains no analytics, no crash reporting, no advertising, and no third-party trackers.
• jack does not collect, transmit, or sell any personal information.
• your chats are stored only on your device, encrypted at rest with a key that never leaves your device. they are excluded from cloud backups by design.
• the ai runs entirely on your phone. when you chat, no network request is made. airplane mode works.

the only network activity jack itself performs

model downloads. to start chatting you download the model file you select from a public host (hugging face or github). if you turn on the optional memory feature, jack also downloads a small helper model from github once. these are normal file downloads. after that, the models run entirely on your device and send nothing over the network when you use them.

offline facts. if offline facts are on (they are by default), jack downloads its offline encyclopedia, a single file of about 76 mb, from github: right after you download a model, or when you turn offline facts on. it is a plain file download: nothing about you or your chats is sent, and no account or identifier is involved. after that, fact lookups run entirely on your device. turning offline facts off deletes the encyclopedia from your phone; turning them back on downloads it again.

update checks. about every six hours, while jack is open, it downloads a small public file from github that lists model updates and occasional notices, such as "please update the app". this is a plain file download: nothing about you or your chats is sent, and no account or identifier is involved. like any download, the host sees the request arrive.

these are the only network requests jack makes on its own.

the one-time pro purchase

jack's optional "pro" unlock is a one-time purchase processed by google play billing. google processes the payment and gives jack an anonymous purchase token; jack never sees your name, email, or payment details. the unlocked state is remembered on your device, and google play restores it automatically on a new device. google's own privacy policy governs the payment itself.

to handle purchases, jack includes google's play billing library. that library sends google diagnostic data about the purchase flow (for example, whether connecting to google play or loading the price worked) under google's privacy policy. it does not include your chats or anything you type. jack itself does not receive or store this data.

optional hand-offs you explicitly trigger

jack's actions can open another app you already have installed, passing along only what you asked for. these happen only when you (or an action you enabled and confirmed) choose them; jack never does them in the background:

• drafts. "text someone" or "email someone" opens your sms or email app with a draft. you review and send it yourself. the message goes through that app, under its policy.
• web search and maps. these actions open your browser or maps app with your query. those apps and their own policies govern what happens next.
• timers, alarms, camera, flashlight, and similar device actions use android's standard mechanisms on your device. nothing leaves the phone.

permissions

jack requests only the permissions needed for features you actually use: the microphone for voice input to audio-capable models (recorded on-device, sent to the on-device model, never uploaded), contacts read access only to resolve a name into a number when you ask for a text draft, the internet permission for model and offline-facts downloads and update checks, and special access you grant explicitly in android settings (usage access for "about this phone" answers, do-not-disturb access for the quiet-mode action). each is used locally, for the stated feature, and nothing is sent off the device as a result. while a model or offline-facts download you started is running, jack shows a notification with its progress (the notification permission, which jack asks for when you start a download); it is created on your phone and nothing in it is sent anywhere.

the optional accessibility service

jack offers an opt-in accessibility service used for exactly one thing: performing the system "back" navigation action when you ask for it. it is configured so it cannot read your screen and it stays off until you enable it in android's accessibility settings. it is never used for ads, data collection, or anything else.

data deletion

because nothing is stored off your device, there is nothing for us to delete on a server. deleting a chat removes it from your device; removing a model frees its storage. uninstalling jack removes everything.

children

jack is a general-purpose assistant rated for adults and is not directed at children.

changes

if this policy changes, the updated version will be posted at this url with a new "last updated" date.

contact

questions about privacy: keenan@boothcheck.com