Last updated:
Cloak: Offline AI is developed by Polyaura LLC (“Polyaura”, “we”). This policy covers Cloak on iPhone and iPad and Cloak for Mac, and, at the end, this website.
Depending on the platform, the permissions you grant, and the features you use, Cloak processes conversations, documents you attach, photos and their metadata, microphone recordings, voice memos and their transcripts, location information, and recaps. It can also derive information from them, such as recurring places, routines, or activities.
All of this is processed on your device and stored there, using the standard storage your device’s operating system provides. Cloak never uploads any of it, to Polyaura or to anyone else, and none of it is included in anything Cloak sends. Voice memos are transcribed by Apple’s on-device speech recognition, and Cloak never sends audio off the device to be transcribed. Data sources are used only when you enable them, and turning a source off stops Cloak using what depends on it.
Your device’s own backups, such as iCloud Backup or a backup to your computer, can include Cloak’s conversations, voice memos, transcripts, and settings, as they include other apps’ data. Those backups are made and kept by Apple or by your computer, not by Polyaura. On iPhone and iPad, Cloak keeps Recap’s location history, learned places, and saved recaps, documents you attach to chats, and its downloaded AI models out of device backups.
When Cloak for iPhone and iPad is set up on a new installation, before the AI model is downloaded, it asks one question: “What made you buy Cloak?” You choose one of seven answers: AI that works without internet; keeping my conversations private; pay once, no subscription; simple setup, no technical knowledge needed; AI running directly on my device; Voice Memos or Recap; or Other, where you can write up to 300 characters in your own words. Answering is optional: Skip continues setup and sends nothing. The screen says that your answer is shared with Polyaura before you send it.
If you answer, Cloak sends Polyaura your answer, any text you wrote under Other, the survey’s version number, the platform (“ios”), and a random ID made for that one answer so that a retry is not recorded twice. We store these with the date and time we received them, in UTC, to the second. If the answer can’t be sent straight away, for example because you are offline, it waits on your device, and Cloak tries again when it is next opened or brought to the front: after a minute at first, then less and less often, down to once a day. An answer that cannot be sent within 30 days, or that our server refuses, is deleted from the device.
Your answer is not linked to an account, a name, an email address, or a device identifier. Text you write under Other is sent as you wrote it, so please do not include personal information in it.
We use the answers to understand why people choose Cloak and to decide what to build and how to describe it. Someone who had already set up Cloak before this survey was introduced is not asked. Someone who deletes and reinstalls Cloak is asked again, because Cloak keeps nothing that would recognise them.
Cloak for iPhone and iPad can share how often a few features are used. This is off unless you turn on Share feature-use counts, which Cloak offers during setup, on the screen shown while its AI model downloads, and, if you had Cloak before this was introduced, in a one-time notice. You can turn it on or off at any time in Settings. Turning it on, wherever you do, first asks you to confirm that you are 18 or older. Nothing is counted while it is off, and turning it off deletes any counts not yet sent.
With it on, Cloak counts four things:
Cloak keeps these counts on your device for each day (in UTC) and sends each day’s counts in a single request once that day is over. If Cloak hasn’t been opened for a while, several days’ counts can be sent together, up to ten at a time. Each request contains only those counts, the date, the platform, a format version number, and a random ID made for that day’s counts so that a retry is not counted twice. It never contains what you said, recorded, recapped, or typed. A request that can’t be sent is tried again later with the same random ID, after a minute at first, then less and less often, down to once a day. Counts that cannot be sent within 30 days are deleted from your device.
On our server, each day’s counts are added to that day’s totals for all users, and the request itself is not kept. Its random ID is kept until 35 days after the day it covers, so that a retried request is not counted again, and is then deleted automatically. Because there are no identifiers, we cannot tell how many people the counts come from or follow anyone’s use of Cloak over time, and we do not try to.
We use the totals to see which features are used and how often setup is completed, to decide what to improve.
Model downloads. Cloak downloads its AI models over HTTPS from Hugging Face (huggingface.co), where the models are published, and the files are delivered through Hugging Face’s content-delivery network. Some optional features, such as photo understanding in Recap, download an additional model the same way. Like any web server, Hugging Face receives your device’s IP address and standard request information when a model is downloaded. It receives these requests directly from your device and handles them independently, not on Polyaura’s behalf, under its own privacy policy. Your personal content is never included, and Polyaura receives nothing about your downloads. After the models are downloaded, Cloak’s AI works without an internet connection.
Survey answers and feature-use counts are sent over HTTPS to polyaura.com, which is hosted by Netlify. Netlify receives your device’s IP address and standard request information in order to deliver the request and to limit how often requests can be made, and handles them under its own privacy policy. Polyaura’s code does not record IP addresses, and Cloak sends no device model, operating system version, language, or app version with these requests. The survey answers and daily totals are stored in Netlify’s storage service, in its US East (Ohio) region, which Netlify encrypts at rest and in transit.
We do not sell any information, share it for advertising, or combine it with information from other sources.
Where data protection laws such as the EU or UK General Data Protection Regulation apply, we rely on these legal bases:
Cloak keeps a record of these choices on your device: what you chose, when, where in the app, which version of our privacy notice was in effect, and whether you confirmed that you are 18 or older. The record stays on your device and is never sent to us.
You can withdraw your consent at any time; withdrawing does not affect processing that took place before. Because survey answers and counts are not linked to you, withdrawing consent cannot by itself remove an answer or counts already sent; see “Your choices and rights” below for what we can do.
Polyaura LLC is based in the United States. The survey answers and feature-use counts Cloak sends us are stored in the United States, wherever you use Cloak, and reach us through Netlify’s global network.
You can turn feature-use counts on or off at any time in Cloak’s Settings; turning them off withdraws your consent, stops counting, and deletes counts not yet sent. The survey is optional, and Skip sends nothing.
Depending on where you live, for example in the European Union, the United Kingdom, or a US state with a privacy law such as California, you may have the right to:
Exercising these rights will not affect the price you pay or the features you get. To make a request, email help@polyaura.com; we will respond as the law requires.
What we can do is limited by how little we collect. Survey answers and counts carry no name, email address, account, or device identifier, so we cannot find them by who you are, and we cannot tell which counts came from your device. An answer with no Other text differs from every other answer that chose the same option only in the time we received it, which you have no way to know exactly, so it cannot be shown to be yours, returned to you, or deleted on its own. If you wrote something under Other, tell us the exact text and roughly when you sent it, and we will delete any answer that matches. If you ask for a copy of an answer, or whether one is in our records, we will consider what you give us: we provide it where that information reasonably shows the answer is yours, and decline where it does not, or where answering could disclose someone else’s answer. Feature-use counts are added to everyone’s daily totals as soon as they arrive, so they cannot be separated, returned, or deleted individually. Survey answers are deleted automatically after 12 months in any case.
Cloak is intended for adults. It is rated 18+ on the App Store and is not directed at anyone under 18. Cloak does not verify anyone’s age, but turning on feature-use counts asks you to confirm that you are 18 or older, and they stay off without that confirmation. We do not knowingly collect personal information from anyone under 18. Survey answers and feature-use counts carry no identifiers; if you believe someone under 18 has written personal information in a survey answer, email us the text and roughly when it was sent, and we will delete it.
Cloak for Mac does not ask the purchase survey and does not collect feature-use counts. Its only network requests are the model downloads described above.
Cloak for iPhone and iPad 1.2.8 and earlier do not ask the survey or collect feature-use counts; their only network requests are model downloads.
When we change what Cloak collects, we update this page and the date above, and Cloak tells you the first time you open it after an update that changes what it collects.
Polyaura.com is hosted by Netlify, which processes visitors’ IP addresses and standard request information to serve the site. It uses GoatCounter, a privacy-focused analytics service, to count page views and clicks on App Store links. GoatCounter records the page, the referring site, and the browser, operating system, screen width, language, and country of each visit. It uses the IP address to work out the country and to avoid counting a repeat visit twice, but does not store IP addresses, and it does not set cookies or store anything in your browser. GoatCounter is operated from Ireland and keeps its data on servers in Finland and Germany (GoatCounter’s privacy policy). Website analytics are separate from the Cloak app, and this policy page is not counted.
Questions about this policy or your information: email help@polyaura.com, or write to Polyaura LLC, 8735 Dunwoody Place, Ste R, Atlanta, GA 30350, United States.