Privacy Policy

Last updated: 2026-10-04

Short version

Buddy runs on your own computer. Your AI keys, files, the assistant's memory and your chat history are saved on that computer, and we never receive them. Your messages are not fully private, though: each one is sent to a free AI provider (Google, NVIDIA or OpenRouter) to be answered, and travels through Telegram or WhatsApp (the one you pick). Details below.

What's private and what isn't

Stays on your computer

• Your AI keys and settings.
• The assistant's memory, notes and saved files.
• Your chat history with the assistant.
• The setup page (it runs only on your computer, at 127.0.0.1).

Leaves your computer

• Every message you send, to be answered. Buddy sends it, with the context needed to reply (recent chat, relevant memory, and any file or PDF you ask about), to the AI provider that writes the answer: Google's Gemini API free tier by default, plus NVIDIA Build or OpenRouter free models if you added them as backups.
• Free AI plans can use what you send. Google's terms for the free (unpaid) Gemini API say it uses prompts and responses to improve Google products and that human reviewers may read them (Gemini API terms). NVIDIA's API trial terms let it use content to improve its products and AI models, and ask you not to send personal or sensitive data (NVIDIA API trial terms). Many OpenRouter free models are offered only by providers that may log or train on prompts (OpenRouter provider logging).
• The chat itself travels through Telegram or WhatsApp (the one you pick). Buddy talks to you through Telegram's bot API or as a WhatsApp linked device, whichever you pick. Telegram bot chats are not end-to-end encrypted. Telegram and WhatsApp handle messages under their own policies.
• Web searches and pages you ask the assistant to look up go out over the internet.

So: don't send passwords, one-time codes (OTPs), card or bank details, ID documents, or other people's private information to your assistant.

What we collect

When you buy: your email and payment confirmation, through our payment processor, so we can send your licence key. When you visit this website: basic, anonymous traffic statistics (page views). Telegram and WhatsApp messages are handled by Telegram and WhatsApp, and the AI providers answering them (Google, NVIDIA, OpenRouter) process them, under their own policies.

What we do not collect

We do not collect your API keys, your messages with your assistant, your files, or anything stored by the software on your computer.

Payments

Payments are handled by the payment processor. We never see your card details.

Your rights

Ask us to delete your purchase records any time: hello@jhilmillabs.com.

Changes

If this policy changes we will update this page and the date below.