Privacy Policy & Data Protection

1. Information We Collect & Permission Manifest

Jarvis AI functions as an autonomous, on-device companion. Android runtime permissions are requested strictly to deliver user-initiated core features. Every permission has a specific, transparent purpose:

• Audio & Microphone (RECORD_AUDIO): Used exclusively when you tap the microphone button or speak the wake word to issue a voice command. Voice audio is converted to text for query processing. Audio is never recorded covertly in the background, nor is raw audio permanently stored on external servers.
• Camera (CAMERA): Used strictly when you trigger the Visual Copilot feature to analyze scenes, documents, math problems, or physical objects. Real-time vision frames are processed for inference and discarded immediately.
• Contacts (READ_CONTACTS): Used exclusively on your local device to enable voice actions such as "Call Alex" or "Text Mom: I'm on my way". Your contact book is never uploaded, synchronized, or shared externally.
• Calendar & Alarms (READ_CALENDAR, WRITE_CALENDAR): Enables Jarvis to check upcoming events and create reminders upon your explicit request.
• Notifications (POST_NOTIFICATIONS): Allows Jarvis to deliver critical task execution alerts, timer completions, and reminders on Android 13+.
• Scoped Storage (No broad storage access): Jarvis utilizes Android's modern Scoped Storage and Storage Access Framework (SAF). The app never requests broad device access (MANAGE_EXTERNAL_STORAGE) and only accesses documents you explicitly pick.

2. Artificial Intelligence & Neural API Endpoints

To process natural language queries and provide intelligent responses, Jarvis connects to high-performance AI endpoints (such as OpenRouter, DeepSeek, NVIDIA, OpenAI) or executes on-device models:

• Encrypted TLS Transit: All communication between your device and configured AI providers takes place over secure TLS/HTTPS cryptographic tunnels.
• Bring-Your-Own-Key (BYOK) Security: Users can input their own private API keys. API keys are encrypted locally using flutter_secure_storage backed by the hardware Android KeyStore. Your credentials are never transmitted to our servers.
• Zero Model Training: Prompt data sent through the API is processed strictly to return the immediate response and is not used to train proprietary third-party commercial models without consent.

3. Data Retention & Local Sandboxing

All chat sessions, vault notes, custom prompts, and app preferences reside strictly inside the application's private, encrypted sandbox storage on your Android device. Because Jarvis does not operate a centralized user registration database, your interactions are not indexed on our cloud infrastructure.

4. User Rights & Self-Service Data Deletion

You maintain 100% sovereign control over your data at all times:

• You can wipe all conversation history, cached files, and stored API keys inside Settings → Reset All Data in one tap.
• Uninstalling the app immediately purges all local databases and sandbox files via the Android OS.
• For formal deletion requests regarding support emails, please review our dedicated protocol page below.

5. Children’s Privacy (COPPA Compliance)

Jarvis AI is designed for productivity and utility for general audiences aged 13 and above. We do not knowingly collect, store, or solicit personal data from children under 13.

6. Changes to This Policy

We may update this Privacy Policy from time to time to reflect Android OS updates, regulatory requirements, or application feature evolutions. Any revisions will be published directly on this URL with an updated revision date.

7. Developer Contact & Privacy Desk

For any privacy inquiries, audits, or questions regarding Jarvis AI / JarvisHUD, contact the developer directly: