Privacy Policy
Who we are
DarkGhost Agent provides the DarkGhost Agent app. This policy explains how information is handled when you use the app and its optional integrations. Contact us at support@darkghost.ai with privacy questions or requests.
Your workspace and local storage
The app stores tasks, conversations, generated results, preferences, and remembered context on your device. Optional features may also store attachments, browser sessions, saved places, and action history. Local-first storage does not mean every feature runs offline. Requests can leave your device when you use an AI provider, a website, Apple services, or a connector. Device backups and transfers may include app data according to your Apple and device settings.
AI providers and connected services
The model and endpoint you choose determine where AI requests are processed. A request may include your prompt, relevant conversation history, remembered context, selected attachments, and information returned by tools. On-device Apple model requests are processed through Apple's on-device framework. Optional Private Cloud Compute uses Apple's infrastructure when available and enabled. A remote model endpoint receives the request data needed to answer it. Providers may have their own retention and training practices. Review the provider's privacy policy before sending sensitive information. We do not operate a central DarkGhost conversation service in the current app.
Permissions and tool access
When you enable a feature and grant permission, the app may access information such as your location, calendars, reminders, contacts, selected photos or files, microphone or speech input, camera input, health information, or HomeKit data. Computer-control features on supported platforms may access screen content and use accessibility permissions. The information actually accessed depends on your request and the feature. You can manage system permissions in Settings and manage available tools, approvals, and connectors in the app. Denying permission may limit the related feature.
Credentials, browser sessions, and connectors
The app uses the device Keychain for supported API keys and authentication credentials. Website sessions and connector configuration may be kept locally so you can reconnect. Websites, Google Calendar, custom connectors, and other services receive the queries, content, and actions necessary for the feature you use. Their privacy policies govern their handling of that data. Disconnecting a service does not necessarily delete data previously sent to it; you may also need to revoke access in that service's account settings.
Analytics and crash reporting
Usage analytics and crash reporting are optional and off by default. You can enable or disable Share Usage & Crash Reports in Settings → Sign-ins & Places. When enabled, Google Firebase Analytics and Crashlytics help us understand feature usage and diagnose reliability problems. These services may process app-instance identifiers, device and operating-system information, usage events, performance measurements, crash reports, and network information such as IP addresses. App-authored analytics events are sanitized, and crash breadcrumbs exclude prompt text, conversation content, memory content, tool arguments, raw URLs, and raw task identifiers. This filtering does not remove the Firebase SDKs' own technical data collection. Turning reporting off stops new reporting; it does not automatically erase reports already received by Firebase. See https://firebase.google.com/support/privacy for Firebase's data practices.
Sharing and support
When you export an artifact, share a conversation, send a message, or use a tool that writes to another service, the selected destination receives the information needed for that action. If you email support, we receive your email address, message, and anything you attach. Please send only the information needed to explain the issue. Do not send API keys, passwords, or sensitive health information.
Purposes and disclosures
Information is used to provide the features you request, remember context you choose to keep, maintain integrations, answer support requests, and improve app reliability. The current app does not include advertising placements or an advertising-tracking flow. We do not sell your conversation content. Information may be handled by the service providers described above, by destinations you select, or where necessary to comply with law, protect rights, or address security problems. External services may process information in other countries under their own safeguards and policies.
Retention and deletion
Local workspace information is kept until you delete it or remove the app's stored data. Deleting a task may not remove facts previously saved as separate memory, exported files, backups, website sessions, or credentials. Review memory and connections separately, remove exports where they were saved, and manage device backups when needed. Keychain credentials may survive app removal depending on the platform. Firebase, AI providers, and connected services apply their own retention policies. Support correspondence is retained as needed to resolve your request and meet applicable obligations.
Your choices and rights
You can choose your model endpoint, disconnect services, delete tasks, review remembered information, manage permissions, and control where you share results. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information, or request a portable copy. Contact support@darkghost.ai to make a request about information we hold. We may need to verify your identity. We cannot directly retrieve or erase information that exists only on your device or is held solely by an independent provider. Where applicable, you may contact your local data protection authority.
Security
The app uses platform security features, including supported Keychain storage and optional biometric thread locks. A thread lock controls access within the app; it is not a promise that all underlying data is separately encrypted. No system is perfectly secure. Protect your device, choose trusted endpoints, and avoid sending sensitive information to services you do not trust.
Children and policy changes
DarkGhost Agent is not directed to children under 13 or a higher minimum age required by local law. Contact us if you believe we have received a child's personal information. We may update this policy as the app changes. The effective date identifies the current version; material changes will be communicated through the app or our website as appropriate.