Privacy Policy
Effective date: 23 September 2026
This policy explains what the archived OpenAssistant client stored locally, what it sent directly to OpenAI's Assistants API during use, and what control you retained over that data.
Key Principles
Local-First Storage
Credentials, preferences, and conversation history are stored locally on your device using on-device app storage and Apple platform APIs. I never store or transmit your OpenAI API key to my servers.
User-Controlled Data
You can delete vector stores and remove files from them within the app. Deleting the app removes all locally stored data.
Direct API Calls
The app communicates directly with OpenAI's Assistants API over TLS. No intermediary servers are involved, and I do not proxy or log your requests.
Minimal Retention
I do not maintain persistent user accounts. Support conversations are retained only as long as needed to resolve a request, after which they are deleted within 30 days.
Information Collected
Information stored on your device
- OpenAI API key stored using
@AppStorage. - Assistant configurations, vector store metadata, and chat history saved in local persistence.
- App preferences such as appearance mode and onboarding state.
Information transmitted to OpenAI
When interacting with assistants you choose to send prompts, files, and messages to OpenAI. These requests are processed under OpenAI's terms. Review their policy at openai.com/policies/privacy-policy.
Support interactions
When you contact me by email I receive any information you provide voluntarily (for example device model, iOS version, logs). I use this information solely to resolve the ticket.
How Information Is Used
- Authenticate requests you make to OpenAI using your personal API key.
- Provide the features you initiate (assistant management, file uploads, chat sessions).
- Respond to support requests and troubleshoot reported issues.
- Comply with applicable legal obligations when necessary.
I do not sell, rent, or monetize personal data. I do not use analytics SDKs or advertising frameworks.
Your Rights & Choices
Access, correction, and deletion
You can view your data within the app; deleting the app removes it. For assistance, email gunnarguy@me.com. I respond within two business days and resolve validated deletion requests within seven business days.
EU/UK GDPR
OpenAssistant operates as a data controller for the information you share for support. My legal basis for processing is legitimate interest in providing customer service. You have the right to lodge a complaint with your local supervisory authority.
California Consumer Privacy Act (CCPA)
I do not sell personal information. California residents may request disclosure or deletion of customer-support records by emailing gunnarguy@me.com.
Data Security
- All network traffic occurs over HTTPS with TLS 1.2 or later.
- The API key is stored in UserDefaults through
@AppStorage, not in the Keychain. - Face ID / Touch ID protection for the API key was never added.
- Support email is hosted by a provider offering industry-standard encryption at rest and in transit.
Children's Privacy
OpenAssistant is intended for users 13 years of age and older. I do not knowingly collect information from children under 13. If you believe a child has provided information, contact gunnarguy@me.com and I will promptly remove it.
Changes to This Policy
I will update this policy when I introduce new features or when regulations require clarification. The latest revision date will always appear at the top of the page. I recommend reviewing this page before major app updates.
Contact
Email privacy questions to gunnarguy@me.com. For general support, visit the Support Center. Postal correspondence can be directed to: OpenAssistant Support, 548 Market St PMB 32110, San Francisco, CA 94104, USA.