Privacy policy.

Who we are

Pond is provided by AKRO-in. d.o.o., Ankaranska cesta 5C, 6000 Koper – Capodistria, Slovenia. We are the controller for personal information we handle through this website and our support service.

Contact us at hello@usepond.app. Please put “Pond privacy” in the subject for a privacy request.

What stays on your phone

Pond uses Apple’s on-device language model for core answer generation. It does not send those conversations to our cloud AI service or maintain a cloud chat-history database.

Chat history, saved memories, preferences and pond progression are stored locally in the version described here. We cannot retrieve your local chats from our servers. Review and remove conversations and memories in the app. Deleting the app removes its local app data, subject to iOS backup and restore behavior. Your Apple device, backup and operating-system settings also apply.

Calendar and Reminders access is optional and read-only. Microphone and speech permissions are optional for dictation, which uses on-device recognition when available. These permissions support the feature you choose; you can revoke them in iOS Settings.

When a connection leaves the device

Web search sends a search query to DuckDuckGo. Weather sends coordinates to Open-Meteo; searching for a place also sends its name to Open-Meteo’s geocoding service. When Pond interprets a request as needing an image, it can send an image query to Wikimedia Commons and load a returned thumbnail from Wikimedia’s servers. Image retrieval may be selected from the request without turning on a separate search switch.

Providers receive network information such as your IP address as part of these requests. Queries can contain details derived from what you ask, so consider what you include. Opening a source link also connects to that source’s website.

These providers process requests under their own policies: DuckDuckGo privacy, Open-Meteo terms and privacy and Wikimedia privacy. Complete chat history is not uploaded by Pond for these tools. Model downloads, App Store downloads and operating-system services are handled by Apple under Apple’s policies.

This website and support

Cloudflare hosts this site and receives ordinary request information, including IP address, browser information, requested URL and time, to deliver and protect it. We do not install advertising trackers, website analytics scripts or non-essential cookies. Read Cloudflare’s privacy policy for its processing.

If you email us, our Gmail inbox receives your email address, message and any attachments. We use these to answer your request and troubleshoot. Please do not include passwords or sensitive chat content you do not need to share. Google processes mailbox data under its applicable privacy policy.

We rely on our legitimate interests in delivering and securing the site and responding to support requests. Where a request concerns our contract with you, we also process information needed to perform it. We process information required by law on that legal basis. Optional device permissions are requested before access and can be withdrawn.

We do not sell personal information or use chat text for advertising. Cloudflare and Google operate internationally, so relevant service data may be handled outside your country, including outside the EEA. Where required, applicable transfer safeguards must be used; provider privacy notices describe their international processing.

Retention and security

Local app information stays on your device until you remove it or delete the app, subject to device backup settings. We keep support correspondence while the request is open and for up to 12 months after it closes, unless law or an unresolved dispute requires longer retention. You may request earlier deletion where applicable.

Hosting providers may retain request and security information according to their service policies. We do not keep a separate website visitor database. We use HTTPS for this site and restrict access to support correspondence. No device, email or online service can guarantee absolute security.

Your choices and rights

Depending on applicable law, you can request access, correction, deletion, restriction or portability of personal information we hold, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Email hello@usepond.app with your request. We may ask for proportionate information to verify your identity. We aim to respond within one month, with any lawful extension explained. We cannot export local chats we do not possess; manage them on your device.

You may complain to your local data protection authority. In Slovenia, this is the Information Commissioner. You do not need to contact us first to exercise that right.

Pond is not directed to children under 16. If you believe a child has sent us personal information through support, contact us so we can address it.

Accounts and future releases

Account syncing, app analytics and subscriptions are planned features, not part of the local launch version covered by this policy. Before activating them, we will explain the information collected, providers, retention, deletion controls and any additional choices in an updated policy. Chat history is intended to remain device-only.

We will update this page when practices change and provide additional notice where required. Check the date at the top for the current version.