# SecureThink Privacy Policy **Effective Date: July 8, 2026** **Developer**: FutureAGI At SecureThink, we are committed to providing you with a premium, secure, and private agentic AI experience. This Privacy Policy details how we handle your personal data and respect your privacy. ## 1. Core Architecture: Local-First & Zero-Knowledge SecureThink is engineered from the ground up to operate as a local-first, zero-knowledge application. * **Zero-Server Storage**: We do not own, operate, or maintain any centralized servers that store your chat history, vector indexes, credentials, or uploaded documents. * **Data Ownership**: 100% of your knowledge base, offline documents, AI chat transcripts, and settings reside exclusively on your physical device. If you delete the app, all your data is permanently deleted from the device. ## 2. Security Shield & Cryptographic Protection * **Root-Level Encryption (SQLCipher AES-256)**: All local SQLite databases (containing session transcripts, document text chunks, metadata, and categories) are encrypted on-device using SQLCipher with AES-256 bit encryption. Even if a third party gains root access to your device or physically extracts the flash storage, they cannot decrypt or read your databases. * **On-Disk Document Encryption (AES-GCM-256)**: When you import documents (PDFs, DOCX, PPTX, CSV, TXT, or Markdown) from other applications, SecureThink creates a local replica of the original file within its private app sandbox. This replica is immediately encrypted using AES-GCM-256 with keys stored securely in the hardware-backed Android Keystore. This enables secure offline note editing, re-chunking, and re-embedding while protecting your files from unauthorized extraction. * **Sandbox Isolation**: SecureThink leverages Android's native application sandbox. No other third-party application installed on your device can inspect, hook, grab, or extract data from SecureThink's isolated storage directories. * **Biometric Identity Verification**: To prevent physical unauthorized access, SecureThink includes an automatic lockout mechanism. If the app is sent to the background for more than 10 minutes, it automatically locks down, requiring fingerprint or facial recognition to decrypt the UI session. ## 3. Hybrid Cloud Gateway, MCP & De-Identification SecureThink is a private gateway. You can choose to configure external cloud language models (e.g., custom local desktop Ollama/LM Studio, OpenAI/OpenRouter APIs) using your own API keys when documents exceed local context limits. * **MCP (Model Context Protocol) Integration**: You can also configure custom model endpoints via HTTP Stream MCP in the Cloud Mind settings. Connections to these MCP endpoints are established directly from your device. * **Local PII Redaction**: Before sending any user query to a cloud-based API, SecureThink's local Privacy Guard automatically scans the prompt for Personally Identifiable Information (PII)—such as real names, phone numbers, email addresses, passports, SSNs, and credit cards. * **Masking**: This sensitive data is stripped or masked locally *before* transmission, ensuring your personal identity is never leaked to external model providers. * **Direct Transmission**: Connections to your custom cloud API endpoints are established directly from your device to the endpoint. We do not proxy, inspect, or log these API calls. ## 4. Local Permissions, Agent Tools & On-Device Processing SecureThink requests specific Android system permissions and runs local SDKs to execute local automation and note-taking tasks (Local System Tools). All processing is performed strictly on-device: * **Standard System Intents**: For actions interacting with external systems (such as composing an email or creating a calendar event), SecureThink does not silently access your accounts; instead, it triggers standard Android system intents that require your manual confirmation and explicit approval before any execution. * **On-Device OCR & Image Processing**: When you import images (such as receipts, identity cards, or notes) into the Vault, text extraction is performed entirely offline using Google ML Kit's local on-device text recognition. The raw image files and extracted texts remain strictly inside your device's encrypted sandbox and are never sent to external servers or third-party providers. * **Web Search Agent Tools**: SecureThink includes built-in agent capabilities to search the internet (via Brave Search or Tavily). These are strictly disabled by default. If you explicitly configure your own API keys for these providers, your local or cloud agents may transmit dynamically generated search queries to these services to fetch live information. No chat history, personal identities, or vault documents are uploaded to these search engines. ## 5. Model Downloads & Content Delivery Networks (CDNs) SecureThink requires you to download model files (such as language models and embedding weights) to enable on-device RAG and local inference. * **Public Mirrors**: To facilitate these downloads, the app connects directly to public hosting providers and mirrors, specifically Cloudflare R2 (`assets.secure-think.com`) and Hugging Face (`huggingface.co`). * **Connection Data**: Downloading these assets only transmits the standard technical metadata required to establish a connection and deliver the binary files (such as your IP address and user-agent). No chat history, personal credentials, or local documents are ever sent to these services. ## 6. Third-Party Services & Telemetry SecureThink integrates the following Firebase services, all of which are **completely disabled by default** at both the system manifest level and in application preferences. No data is collected unless you explicitly opt in via App Settings. ### Firebase Analytics (Google LLC) * **Purpose**: Anonymous, aggregated usage statistics (e.g., feature adoption, model selection, RAG usage patterns) to help us improve the product. * **Data Collected (opt-in only)**: App interaction events (button taps, feature usage), inference performance metrics, device model and OS version. No chat content, documents, API keys, or personally identifiable information is ever included. * **Default State**: Disabled (`firebase_analytics_collection_deactivated=true` in manifest). Users must explicitly opt in via Settings. ### Firebase Crashlytics (Google LLC) * **Purpose**: Crash and stack-trace reporting to identify and resolve app stability issues. * **Data Collected (opt-in only)**: Crash stack traces, device model, OS version, app version. No user input, chat transcripts, or document content is ever included in crash reports. * **Default State**: Disabled (`firebase_crashlytics_collection_enabled=false` in manifest). Users must explicitly opt in via Settings. ### Firebase Remote Config (Google LLC) * **Purpose**: Dynamic server-side configuration for model parameters (e.g., RAM requirements, thread counts, system prompts) to adjust app behavior without requiring a full app update. * **Data Collected**: Firebase installation ID (a non-personal, resettable identifier) used solely to deliver the correct configuration values. No user content, chat history, or personal data is transmitted. * **Note**: Remote Config is an essential service for model compatibility and operates regardless of telemetry opt-in status. It does not collect or store user content. ### User Feedback (Email) * When you choose to send feedback via Settings, SecureThink opens your device's default email client with a pre-addressed message to `support@secure-think.com`. No device information or analytics data is automatically attached. You control exactly what information to include in your message. ## 7. Data Retention & Deletion SecureThink stores all user data **exclusively on your device**. We operate no backend servers, user accounts, or cloud databases. This means: * **Local Data**: All chat sessions, vault documents, embeddings, settings, and model files reside solely in the app's private sandbox on your device. * **Retention**: Data persists on your device until you choose to delete it within the app (e.g., deleting a chat session, removing a vault document, or uninstalling the model) or uninstall the application entirely. * **Deletion**: You can delete individual items (chat sessions, documents, models) at any time from within the app. Uninstalling SecureThink permanently removes all app data from your device. * **No Server-Side Data**: Because we do not store your data on any server, there is no server-side copy to retain or delete. Your data never leaves your device unless you explicitly configure and send prompts to a third-party cloud model endpoint (see Section 3). * **Opt-in Telemetry Data**: If you have opted into analytics or crash reporting, the minimal diagnostic data described in Section 6 is retained by Google's Firebase infrastructure according to their standard retention policies (typically 14 months for Analytics, 90 days for Crashlytics). You may revoke consent at any time by disabling the corresponding toggle in Settings; no further data will be sent after opt-out. ## 8. Contact Us If you have any questions about this Privacy Policy or SecureThink's security architecture, feel free to contact us at support@secure-think.com.