Harbor LM Privacy Policy

Effective date: 3 November 2026. Applies to Harbor LM 1.1 for iPhone, iPad and Android.

Harbor LM is published by Cogniwiss Labs ("we"). This policy explains what happens to your information when you use the app. The same text is shown in the app under Settings → Privacy Policy and at https://harbor-lm.pages.dev/privacy.

Summary

• Harbor LM has no accounts, no advertising, no analytics, no tracking and no crash reporting service. We do not receive or store any of your information.
• The AI runs on your device. Your conversations, prompts, documents, photos, recordings and the answers the model writes are processed on your device and are never sent to us or to any AI service.
• The app connects to the internet only when you use the Models screen to search for, check or download an AI model from Hugging Face. Those requests contain the model name or the search words you typed — never your conversations or files.

1. Information we collect

We collect no personal information. Harbor LM has no server of ours that it talks to, so we have no copy of anything you do in the app. We cannot see, recover or delete your content, because we never receive it.

2. What happens on your device

All of the following run entirely on your device:

• Running the AI model: loading the model, writing answers, keeping conversation history and using earlier turns as context.
• Reading and answering questions about your documents, spreadsheets, presentations, PDFs and text files, and creating or editing documents.
• Searching your own files and notes (the "Knowledge" index), including image, audio and video search, which uses a local model.
• Voice input. Speech is turned into text by the on-device speech recognizer of your phone: Apple's on-device SpeechAnalyzer on iOS 26 or later, and Android's on-device speech recognizer on Android 13 or later. Harbor LM never asks for the network version of these services. Where on-device recognition is not available (for example on older system versions), voice input does not work, and no audio is sent anywhere instead.
• Reading text from photos and scanned pages. On iPhone and iPad this uses Apple's on-device Vision text recognition; on Android it uses an AI model that runs on the device, if you have installed one.

Harbor LM does not include text-to-speech.

3. Do conversations, prompts, files or audio leave the device?

No. Harbor LM does not send your conversations, prompts, AI answers, documents, photos, audio recordings or Knowledge index anywhere. There is no cloud inference, no online search of the web and no connected service in this version.

Your operating system works outside Harbor LM's control. For example, Apple or Google may download language packs for their on-device speech and text recognition, and on Android, taking a photo opens your phone's camera app. Those are governed by Apple's or Google's own privacy policies.

4. Optional online features

The only online feature is model management on the Models screen. Each request happens only when you act:

• Search: when you search Hugging Face for models, the words you type are sent to huggingface.co.
• Check fit and install preparation: the app asks huggingface.co for the list of files in the model you selected, to show its size and whether it fits your device.
• Download: after you confirm the download size, the model files are downloaded from huggingface.co and its download servers (cdn-lfs.huggingface.co, cdn-lfs.hf.co, us.aws.cdn.hf.co and cas-bridge.xethub.hf.co).

There are no analytics, advertising identifiers, automatic update checks or background network requests. Nothing is sent when the app starts.

5. Model downloads and the network requests they make

A model request contains the address of the model or file, standard web headers and a user-agent that names Harbor LM. No account, sign-in token or personal identifier is attached. Like any website, Hugging Face and its download servers can see your device's IP address, the time of the request and which model you asked for. Hugging Face's handling of that information is described in its own privacy policy at https://huggingface.co/privacy.

Models in the built-in Recommended list are checked against a digitally signed catalog, and each of their files is verified with a SHA-256 checksum before it is used. A failed or interrupted download is discarded. Before a download starts, the app checks that enough free storage is available and tells you the size.

Each model is published by its own author under its own license (for example, Apache 2.0 or MIT). For models in the Recommended list the license is shown before you download; for models you find through search, the license is the one on the model's Hugging Face page. Models found through search are not in the signed catalog: they are checked against the size Hugging Face reports, and their checksum is recorded when installed. Harbor LM's AI answers can be inaccurate or incomplete; check important information before relying on it.

6. Storage on your device, retention and deletion

What is stored: your conversations, your Knowledge index, saved memories, activity history (which includes the questions you asked), documents you work on, installed models and your app settings. These live in the app's private storage.

Encryption: conversations, the Knowledge index, memories, activity history and diagnostic logs are encrypted on disk with a key held in the iOS Keychain or the Android Keystore. A few things are not encrypted: model files, your display preferences (theme, language and chosen model), the local log of model requests (which records the addresses requested, including search words), and files you choose to save or export. On iPhone and iPad, saved and exported files go to Harbor LM's folder in the Files app, where you and other apps you allow can see them.

Backups: Harbor LM's data folder is excluded from iCloud and computer backups on iOS, and from Google backup and device-to-device transfer on Android.

How long: your content stays on your device until you delete it or uninstall the app. The diagnostics log keeps only the most recent 500 entries. A model you remove is kept for 72 hours so it can be restored, then deleted.

How to delete:

• A conversation: open the conversation list and choose Delete.
• A document or folder in Knowledge: remove the source. You can also remove the conversation turns that used it.
• A memory: delete it in the Memory panel.
• A model: uninstall it on the Models screen.
• Everything: uninstall Harbor LM. This removes all of the app's data from the device. In this version, activity history cannot be deleted item by item; uninstalling removes it.

7. Permissions

• Microphone: used only while you press Record, to turn your speech into text on the device. The recording is deleted as soon as it has been transcribed or you cancel.
• Camera: used only when you choose Take a photo, to read the page on the device. On iPhone and iPad the photo is not saved to your photo library; on Android your camera app takes the photo. In both cases the app deletes its copy after reading it.
• Files: Harbor LM opens only the files you pick with the system file picker. The operating system gives the app a copy to read.
• Internet (Android): needed only for the model features in section 4.

Harbor LM does not request access to your location, contacts, photo library, calendar or other apps, and does not track you across apps or websites.

8. Third parties and international transfers

Harbor LM contains no third-party analytics, advertising or crash reporting software. The only third party the app contacts is Hugging Face, Inc., when you use the model features above. Hugging Face is based in the United States, so a model request may be processed in the United States or wherever its download servers are located. We do not share or sell any information, because we have none to share.

9. Your rights and how to contact us

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have rights to access, correct, delete or move your personal data, and to object to or restrict its use. Because we do not collect or hold personal data, we have nothing to provide or delete; your data is under your control on your device, and you can delete it at any time as described in section 6. For information Hugging Face receives during model downloads, contact Hugging Face.

Children: Harbor LM is a general productivity tool and is not directed at children under 13. It collects no information from anyone, including children.

Changes: if a future version adds any new data collection or network feature, we will update this policy and the app store privacy declarations before that version is released, and change the effective date above.

Questions or requests: privacy@cogniwiss.com. You can also use this address to report a harmful or offensive AI answer.

Cogniwiss Labs