AI Hub — Privacy Policy

Last updated: 27 July 2026

AI Hub is a "bring your own key" AI client. You connect your own AI provider accounts, and the app talks to those providers directly from your phone. This policy describes exactly what the app does with your data.

The short version: your conversations and your API keys stay on your device. The only personal information that leaves it is what is needed to sign you in.

1. What stays on your device

All of the following is stored only in AI Hub's private storage on your phone. It is not uploaded to us, and we have no server that could receive it:

• Conversations, messages and their attachments
• Projects, prompts, agents and knowledge snippets
• Documents you import into Knowledge (read on-device; never uploaded)
• Provider connections and settings, usage and cost records, connection-health results, custom instructions, appearance and profile preferences

API keys. Your provider API keys are encrypted on your device with AES-GCM, under a key held in your device's browser keystore that is marked non-extractable — it cannot be read out of the device by the app or by us. The keys are never transmitted anywhere except to the provider they belong to, when you send a request to that provider.

Automatic cloud backup is switched off. Android's Auto Backup would otherwise copy the app's data directory to your Google Drive. AI Hub disables it — cloud backup and device-to-device transfer are both excluded — so your conversations and your encrypted keys are not copied off the device by the operating system.

Uninstalling AI Hub deletes all of it, including your sign-in session. Reinstalling gives you a fresh, empty app and requires you to sign in again.

2. What leaves your device

Signing in. AI Hub uses Google Firebase Authentication. When you create an account or sign in, your email address is processed by Firebase, which issues an account identifier (UID) and a session token. If you use "Continue with Google", Google likewise processes your sign-in. This is the only personal data the app sends for its own operation. It is used solely to authenticate you and to keep each account's data separate on the device. Firebase's handling of it is covered by Google's Privacy Policy.

Talking to AI providers. When you send a message, it goes directly from your phone to the provider you chose (for example OpenAI, Anthropic, Google, Groq, or a local server you run yourself), authenticated with your own API key. It does not pass through any server of ours. What that provider does with your prompt is governed by your agreement with them, not by this policy — including whether they retain it or use it for training. Please read the privacy policy of each provider whose key you add.

If you enable web search, your search query is sent in the same direct way to the search provider whose key you supplied.

Nothing else. AI Hub contains no analytics, tracking, advertising or crash-reporting SDK. We do not collect usage statistics, device identifiers, or any record of what you ask the AI.

The app also loads no content from third-party servers as it runs. Its fonts and images are bundled inside the app, so simply opening AI Hub contacts nobody — network requests happen only when you sign in, send a message, or run a search. Links to provider documentation open in your browser, and only when you tap them.

3. Backups you create yourself

Settings → Backup & restore writes a backup file to your device's Documents folder (or wherever you choose to share it). You control that file. Two things to know:

• It excludes your API keys entirely, by design, so a backup file cannot be used to spend money on your accounts.
• It is plain, unencrypted JSON and contains your conversations. Treat it like any other personal document: if you copy it to cloud storage or send it to someone, they can read your chats.

4. Bug reports

If you file a bug report from the app, AI Hub pre-fills only the app version, platform, and the model, provider name and error message from the most recent failure. It deliberately excludes your conversation content and anything key-related. Nothing is sent until you choose to send it, and you can edit the text first.

5. Children

AI Hub is not directed at children under 13, and we do not knowingly collect personal information from them.

6. Your control and your rights

• Delete your content: clear individual chats, or use Settings to clear all chats. Uninstalling the app removes everything stored on the device.
• Delete your account, in the app: Settings → Account → Delete account and all data. This deletes your Firebase account and its email address, and at the same time erases that account's conversations, projects, prompts, agents, knowledge snippets and saved API keys from the device. You confirm by typing DELETE and re-entering your password (or re-confirming with Google). It takes effect immediately and cannot be undone — nothing is held on a server that could be restored, so make a backup first if you want to keep your chats.
• Delete your account by email: write to the address in section 9 from the address you signed up with, and we will delete the account. Data already on your device is removed by uninstalling the app.
• Revoke provider access at any time from the provider's own dashboard — that is where your keys live.

7. Security

Keys are encrypted at rest under a non-extractable device key. Requests to providers use HTTPS. One deliberate exception: AI Hub lets you connect to a local or network endpoint over plain http:// (for example Ollama or LM Studio on your own machine), because those servers commonly do not offer HTTPS. If you point AI Hub at an http:// address, traffic to it — including the key for that endpoint — is not encrypted in transit. Only use http:// for servers on your own machine or network.

No system is perfectly secure, and a device that is rooted, compromised, or shared with someone who has your unlock code is outside what the app can protect against.

8. Changes

If this policy changes materially, the "Last updated" date above changes and the new version is published at this URL before it takes effect.

9. Contact

Questions about this policy, or a request to delete your account: getaihubapp@gmail.com