Legal
Privacy Policy
Last updated: August 2026 · Provider: Kombiverse Labs · Contact and deletion requests: [email protected]
Summary. isolaite is local by default. Normal use keeps chats, prompts, documents, images, recordings and model interactions on your device. There are no accounts, analytics, advertising or tracking SDKs, and no background sync. The only network exceptions are a model download and an optional report that you explicitly submit for one marked assistant answer.
What stays on your device
Everything you create or import in isolaite is processed and stored exclusively in the app's private storage on your device:
- Chats and chat history
- Imported documents (PDF/text) and images
- Personal notes, memory entries, and chat exports (“Personal Knowledge”)
- Settings (theme, model selection, knowledge toggles)
- Downloaded AI model files
AI inference (answers, image understanding, dictation transcription) runs entirely on-device. Prompts, answers, documents, images, recordings and chat history always stay local. An optional safety flag contains only the selected category, the app version and the model name; conversation content is not accepted or transmitted.
What the app uses the internet for
For the one-time download of AI model files during setup (or when you
later add another model), and for an optional report that you explicitly submit. Models are
fetched directly from public model repositories (Hugging Face); their standard access logs
apply as with any file download on the web. A submitted report is sent to Kombiverse Labs
through https://isolaite.app/api/report for moderation and policy review.
Alternatively you can sideload models fully offline via file import.
Optional AI-generated-content reports
The app never sends a report automatically. After you mark one assistant answer and explicitly choose Report, the website endpoint receives only the category, app version and model. The marked answer and all other conversation content stay on the device and are not accepted by the endpoint. The Cloudflare Pages function records a structured safety event for moderation and policy work; Cloudflare also processes technically necessary connection data (such as IP address, user agent and requested resource) to deliver the endpoint and prevent abuse.
Report data is kept for up to 7 days for that purpose and then deleted. For deletion requests concerning a submitted report, contact [email protected]. This path does not create an account, sync chats or receive answer content.
Processors and legal bases
- Hugging Face, Inc. (USA) receives a standard HTTPS download request when you start a model download (Art. 6(1)(b) GDPR).
- Cloudflare, Inc. (USA) delivers this site and
/api/report. A submitted report is Art. 6(1)(a) (consent). Serving the site and abuse prevention is Art. 6(1)(f).
There are no analytics, advertising, or crash-reporting vendors in the app.
Permissions
- Internet: model download and an explicitly submitted report.
- Microphone: local dictation only. Recordings are transcribed on-device and are neither stored nor transmitted. The app shows a disclosure before the system prompt.
- Notifications: so a long local image or speech job can show the foreground-service notification Android requires. Not marketing.
- Files you pick: the system document picker. The app has no general photos or storage permission.
Data deletion
Delete local data by removing content in the app (e.g. “Chats & data” in Settings) or by
uninstalling the app. Uninstalling removes all app data. A previously submitted report is
separate from local app data; request its deletion at
[email protected]. Android Auto Backup and
device-to-device transfer of app data are disabled (allowBackup=false).
Children
isolaite is not directed at children under 13. The Play Store age rating (USK 12+) is a content rating, not an invitation for younger users.
This website
This site is static and sets no cookies. No visitor analytics take place. When you load a page, the hosting provider (Cloudflare) processes technically necessary connection data such as IP address and requested resource in order to deliver the page and to prevent abuse. The legal basis is Art. 6(1)(f) GDPR.
Changes
Changes to this policy will be published here with an updated date.