Apochat Privacy Policy

Last updated July 25, 2026

Alejandro Apodaca, operating as ApoApps, provides Apochat. This policy explains how information is handled when you use Apochat on Apple platforms.

Summary

• Apochat does not require an ApoApps account.
• Conversations, imported files, settings, generated artifacts, and downloaded models are stored in the app's local containers by default.
• ApoApps does not operate a server that receives your chats.
• If you choose a cloud model, Apple Private Cloud Compute, web search, webpage fetching, a model download, or a connected tool or MCP server, the information needed for that request may leave your device and is processed by the service you selected or configured.
• Apochat does not contain advertising or cross-app tracking SDKs, and ApoApps does not sell personal information.

Information stored on your device

Apochat may store the following locally so the app can provide its features:

• conversations, message history, generated artifacts, and user-created content;
• files and images you import or select;
• downloaded model files and download state;
• app preferences, enabled tools, provider configuration, and consent choices;
• diagnostic and agent-run logs that you enable; and
• provider credentials and access tokens in Apple Keychain.

Local data remains under your device account and Apple platform protections. You can delete individual conversations, downloaded models, configured providers, and diagnostic logs from the relevant app screens. Removing the app deletes its sandboxed files. Apple Keychain items may persist until a credential-removal operation completes successfully.

Information sent when you choose an online feature

When you select a cloud provider, Apochat sends the prompt and the conversation context required to answer it directly to that provider. Depending on the request and model capabilities, the transmission may also include selected images or files, tool definitions, and tool results. Cloud provider options are limited to OpenAI/ChatGPT, MiniMax, and a custom OpenAI-compatible endpoint you configure.

When you invoke web search, Apochat sends your search query to the configured search service, such as DuckDuckGo or a SearXNG service. Opening or fetching a result contacts the destination website.

Apochat supports Model Context Protocol (MCP) servers that you configure over HTTP or, on supported platforms, as local standard-input/output processes. When you enable or invoke an MCP tool, Apochat sends the tool arguments and selected content needed for the request to that server.

Apple platform permissions and local tools

If you enable the calendar tool and grant write access, Apochat writes only the event details you approve to your calendar. If you enable the flashlight tool and grant camera access, Apochat accesses the camera hardware only to control the device torch; it does not capture or store photos, video, or audio.

Information ApoApps receives

ApoApps does not receive your prompts, conversations, imported files, provider credentials, search queries, or tool arguments through an ApoApps backend. If you contact support, we receive the contact information and message content you choose to provide. Apple may make aggregated App Store analytics or crash diagnostics available to developers according to your Apple device and App Store privacy choices.

Retention, security, and your choices

Local content remains until you delete it or remove the app. Provider credentials remain in Keychain until a credential-removal operation completes successfully. Online services and MCP servers you choose have their own retention practices.

Apochat uses Apple Keychain for provider credentials and relies on Apple platform data protection for local storage. You control whether to configure a cloud provider, enable connected tools, download models, or share files.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information held by ApoApps, and to object to or withdraw consent for certain processing. Because ApoApps does not receive your app content through a backend, most app data can only be managed on your device. For information held by a provider you selected, contact that provider directly.

Contact

To make a privacy request, email apocor.alex@gmail.com.