Privacy policy

• Models you download or copy onto the phone, in the app's own storage.
• Settings and API keys. Keys let apps use the server; they are stored in the app's private storage and are excluded from Android backups and from device-to-device transfer.
• Run history: for each request, which model answered, which key asked (by the name you gave it), timings, token counts, and the phone's battery and temperature state at the time. Never the prompt, the reply, or the key itself. Kept for the last 10,000 requests or 30 days, whichever comes first, and deleted with the app.
• Requests and replies pass through the phone's memory while they are answered. For the Responses API's previous_response_id, up to 64 recent responses are held in memory for at most an hour, per key; they are not written to storage and are gone when the server stops.
• The browser chat keeps your key and conversations only in that browser tab's memory; they are gone when you reload or close it.

• Hugging Face. When you browse the catalog, download a model, or the app shows a model publisher's picture, the app contacts huggingface.co and its download servers. Like any website they receive your IP address and the app's name as the user agent. No account or token is sent. Hugging Face's own privacy policy applies to those requests.
• The apps and devices you let in. The server answers whoever presents a valid key: on this phone only, by default, or on your local network if you choose Your network. In network mode the connection is plain HTTP, so others on the same network could read requests, replies and keys in transit; use a network you trust, or a private tunnel.
• Network discovery. In network mode only, the phone announces the server on the local network (as _execuserve._tcp, with your phone's model name) so clients can find it.
• Things you choose to share. Exporting your run history, or reporting a model reply, opens Android's share sheet. Nothing is sent until you pick where it goes, and it goes only there.

We do not sell, rent or share data, because we do not collect it.

Everything ExecuServe keeps is on your phone, so you delete it there; there is nothing for us to delete, because we hold nothing. In the app:

• Run history: Activity → Clear. It is also removed on its own after 30 days or 10,000 requests.
• Models: Library → Delete on each model, which removes its files.
• API keys: Settings → API keys → Revoke.
• Chat conversations in the app are only in memory: New chat, or closing the app, removes them. The browser chat's are gone when you reload or close the tab.

To delete everything at once (models, settings, keys and history), uninstall ExecuServe, or clear its storage in Android's Settings → Apps → ExecuServe → Storage. A run history you exported, or a report you shared, is wherever you sent it.

Hugging Face keeps its own records of model downloads (your IP address and the app's name); we cannot delete those. Ask Hugging Face, under its privacy policy.

Replies come from third-party models you choose, not from us. They can be wrong or offensive. Any reply in the app can be reported from its Report this reply action, which shows you the full report before you share it.

ExecuServe is a developer tool and is not directed at children under 13.

Changes to this policy are published on this page, with the effective date above. Questions: alpha@experimentalmachines.org.