CanopyChat Privacy Policy

Effective date: July 18, 2026

CanopyChat is a local-first LLM chat app for iPhone. This policy explains what information the app stores, when information may leave your device, and how to contact us.

Short version: CanopyChat is designed to keep conversations on your device by default. Information is sent outside your device only when needed for features you choose, such as web search, location-aware answers, model downloads, purchase validation through Apple, or feedback you send.

Accuracy and safety: CanopyChat may produce inaccurate, incomplete, outdated, or unexpected responses. Verify important information independently and do not rely on CanopyChat for medical, legal, financial, safety, or emergency decisions.

Contributor Beta and Model Improvement

The CanopyChat Contributor Beta is a separate, clearly disclosed testing program. If you choose to join it in the app, selected interactions may be securely sent to CanopyChat so we can evaluate and improve the model. The Contributor Beta is not the same as the private production experience described in our marketing.

Contributor participation is voluntary. We ask for your affirmative agreement before collecting contributor data. You can stop future collection at any time in the app’s Contributor settings. Stopping participation deletes contributor data that is still queued on your device; it does not automatically delete data already received by CanopyChat.

What Contributor Data May Be Collected

When Contributor Beta collection is active, CanopyChat may retain selected examples rather than every conversation. These can include:

Your prompt and the model response associated with a selected interaction.
Feedback you provide, including a thumbs-down, written correction, report, or regeneration request.
Quality and reliability signals, such as empty, truncated, malformed, or failed responses and tool failures.
A small random sample of ordinary interactions to compare successful and unsuccessful responses.
Technical context needed to evaluate the example, such as app version, model version, prompt version, device type, operating-system version, latency, and a random app-installation identifier.

How Contributor Data Is Used

We use contributor data to investigate failures, build evaluation sets, measure model quality, and prepare reviewed training examples for future model improvements. We do not sell contributor data, use it for behavioral advertising, or use it to track you across other companies’ apps or websites.

Retention and Deletion Requests

We retain contributor data only as long as reasonably necessary for model evaluation, safety, reliability, and improvement work. Raw uploads may be de-identified, redacted, reviewed, and transformed into curated evaluation or training records. To request deletion of contributor data already received by CanopyChat, email support@canopychat.app with “Contributor data deletion request” in the subject line and any relevant interaction details. We may need enough information to locate the submitted record without asking for unnecessary personal information.

Information Stored on Your Device

CanopyChat may store the following locally on your iPhone:

Conversation titles, messages, summaries, and attachments you add.
Custom assistants, system preferences, workspace names, and app settings.
Downloaded local LLM model files and related runtime cache.
Subscription entitlement state returned by Apple StoreKit.

Information Sent Outside Your Device

CanopyChat may send limited information outside your device only for selected features:

Contributor Beta: If you explicitly join the Contributor Beta, selected interactions and technical context may be sent for model evaluation and improvement as described above.
Web search: If you ask for current, factual, local, weather, news, or web-grounded information, CanopyChat may send a search query and relevant context to a search service.
Location-aware answers: If you grant location permission and ask for nearby or local information, approximate location context may be used to improve search results.
Attachments: Photos, files, and camera images are used only when you attach or capture them. They may be included in the local LLM prompt and, if a web or backend feature is enabled later, only as needed for the feature you requested.
Model downloads: The app may download LLM model files from a remote model host and cache them on your device.
Purchases: Subscriptions are processed by Apple. CanopyChat receives entitlement information from StoreKit, but does not receive your credit card or Apple ID payment details.
Feedback: If you use the feedback or report issue feature, the message you choose to send may include app version, device information, conversation title, and selected response text.

Location, Camera, Photos, and Files

CanopyChat requests access to location, camera, photos, or files only when you use a feature that requires it. You can manage these permissions in iOS Settings at any time.

Tracking and Advertising

CanopyChat does not include third-party advertising SDKs in the app. The public website uses Meta’s measurement tools to understand page visits, founding-member checkout starts, and confirmed founding-member purchases from advertisements. Meta may receive browser, device, page, and event information for measurement and ad delivery. The website does not send chat content, app conversations, model prompts, or model responses to Meta. You can manage cookies and browser tracking controls through your browser settings.

Children

CanopyChat is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Data Retention

Local conversations and app settings remain on your device until you delete them, uninstall the app, or reset app data. Feedback emails remain in the receiving mailbox unless deleted. Contributor Beta data is handled as described in the Contributor Beta and Model Improvement section above.

Account and Profile Deletion

If you created a CanopyChat profile, you can delete it from the app’s Settings screen. This removes your profile, sign-in sessions, pending authentication data, and the association between your profile and any founding-member entitlement. It does not erase immutable payment or tax records that must be retained for operational, financial, or legal purposes.

If you cannot access the app, email support@canopychat.app with the subject “CanopyChat account deletion request.” Tell us the email address associated with the profile and what you want deleted. We will verify the request and delete the profile and associated personal account data; local conversations and files remain on your device and must be deleted in the app or by uninstalling it.

Your Choices

Delete conversations or attachments in the app where available.
Disable app permissions from iOS Settings.
Manage or cancel subscriptions from your Apple ID subscriptions settings.
In the Contributor Beta, stop future model-improvement collection from the Contributor settings and delete pending contributor data on your device.
Contact support for privacy questions or deletion requests involving feedback you sent.

Contact

For privacy questions, contact support@canopychat.app.

Changes

We may update this policy as CanopyChat changes. The effective date above will be updated when changes are published.