1. Data Controller Identity and Official Contact
This Privacy Policy and Privacy Notice governs the handling of information by the Chattree platform ('the platform', 'we', or 'the Controller'), an independent open-source software project engineered and operated from the United Mexican States (Mexico) by its independent development team.
We adhere strictly to the principle of Privacy by Design and by Default, ensuring that personal artificial intelligence belongs solely to the individual, without compelling users to surrender confidential notes, messages, or documents to remote centralized servers.
For any inquiry, formal request, or question concerning personal data protection, our unified official contact channel is: support@chattree.chat.
2. Acceptance and Explicit Consent
By launching Chattree for the first time and tapping the confirmation action on the welcome screen ('By continuing you accept the Privacy Policy and Terms and Conditions'), or by accessing and interacting with the chattree.chat website and Marketplace services, the User provides free, informed, and explicit consent to the data practices described herein.
This affirmative action constitutes a legally binding agreement entered into validly through electronic means under applicable digital commerce and data privacy laws.
3. Categories of Information Processed
Chattree collects only data strictly required for the execution and technical stability of its features. Data categories are segmented by runtime environment:
- Data processed locally on your handset: Chat message contents, personal notes, reminders, local semantic embeddings (on-device RAG), external AI credentials (BYOK), plugin authentication secrets, and local event journals (EventJournal).
- Hardware and sensor data (under prior explicit on-screen grant): One-shot geographic coordinates, one-shot camera captures, contacts, or calendar entries, solely when a plugin requests them and you grant the Android runtime permission.
- Web portal data (chattree.chat): Standard server infrastructure access logs on Vercel (IP address, browser user-agent, operating system, timestamps) strictly for security and uptime maintenance.
- Marketplace submission data: Sender public IP address (hashed with SHA-256 for anti-spam rate limiting), public GitHub release URLs, and extension package metadata.
4. Purposes of Data Processing
Primary purposes are strictly necessary for service fulfillment and include:
- Running local language models directly on device silicon to answer your chat prompts.
- Managing and persisting message history, notes, and reminders in the local SQLite database.
- Computing local vector representations (ONNX embeddings) for private semantic note search.
- Connecting securely via direct encrypted HTTPS to external AI providers (OpenAI, Gemini, Claude, OpenRouter) when you configure custom API keys (BYOK).
- Executing WebAssembly (WASM) plugins inside an isolated sandbox enforcing least privilege.
- Processing local inbound webhooks and automation triggers configured by the user.
- Verifying package cryptographic integrity (SHA-256) and SemVer ordering for Marketplace submissions.
- Defending web infrastructure against distributed denial-of-service (DDoS) and intrusion attempts.
5. Strict Absence of Secondary Purposes
Chattree does not perform secondary or commercial exploitation of your data. Specifically:
We do not sell, rent, monetize, or transfer your personal data or user-generated content to third parties.
We never utilize your notes, chats, documents, or prompts to train proprietary or third-party AI models.
We do not incorporate invasive telemetry SDKs, Google Advertising Identifiers (GAID), or behavioral tracking scripts.
6. Technical Architecture: On-Device vs. Remote Processing
To guarantee absolute transparency regarding what data leaves your device and under what conditions, four distinct modes are defined:
- 100% On-Device Inference (Default): Processing occurs exclusively within your handset RAM and processor using local GGUF models and ONNX embeddings. No prompt data leaves your handset or crosses the internet.
- Optional Remote Inference (BYOK): When activating a cloud provider, requests travel directly from your mobile device to that provider's official servers over TLS/HTTPS. Chattree operates no intermediary proxy servers and stores zero prompts in the cloud.
- Network-Enabled Plugins: Plugins granted 'network.http' or 'network.local' can query external APIs or local LAN services according to their declared and user-approved manifest.
- 24/7 Cloud Relay (Optional): If you configure webhooks via Cloudflare Workers and Google Firebase Cloud Messaging (FCM), external triggers route through your personal worker script and Google's push infrastructure to reach your device.
7. Security and Hardware Credential Storage
Chattree applies defense-in-depth security engineering to safeguard user information:
- Hardware-Backed Keystore: Cloud API keys and plugin secrets marked with 'isSecret: true' are stored via FlutterSecureStorage in the OS Keystore (AES-256 GCM EncryptedSharedPreferences on Android / iOS Keychain).
- Cloud Backup Prevention: The application explicitly sets android:allowBackup='false' to prevent unencrypted cloud syncing to external drives.
- WASM Memory Sandboxing: Plugins execute in isolated linear memory (capped at 64 MB), bounded by instruction fuel limits with zero direct access to OS paths or raw TCP sockets.
- SSRF Protection: Outbound HTTP requests block private IP ranges and loopback targets by default unless critical local network capabilities are explicitly granted.
8. Data Retention, Destruction, and Privacy Rights
Because Chattree does not retain your conversations or notes on remote servers, your rights to access, rectify, cancel, and oppose (ARCO rights under Mexican LFPDPPP, and erasure/portability under GDPR/CCPA) are exercised directly on your device:
You can review, edit, or delete notes, reminders, and chats within the interface at any time. Selecting 'Delete all conversations and notes' in Settings, or clearing storage in Android Settings, physically and irreversibly destroys all local databases.
For questions or formal inquiries regarding website logs or Marketplace metadata, users may email support@chattree.chat. Formal inquiries receive a response within twenty (20) business days, executed within fifteen (15) business days thereafter, in compliance with statutory deadlines.
Mexican residents may appeal to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at www.inai.org.mx.
10. Amendments and Official Contact
We reserve the right to amend this Privacy Policy to reflect architectural updates, runtime features, or legal revisions. The active version is continuously published at https://chattree.chat/en/privacy with its update timestamp.
For any privacy inquiries, reach our team directly at support@chattree.chat.