Privacy Policy
Last Updated: August 10, 2026
Introduction
Welcome to Zenkai AI, a local-first, premium client application designed to interface with various Large Language Model (LLM) providers. We believe privacy is a fundamental right. Unlike typical AI applications that pass your prompts through middle-man servers, Zenkai AI is built to be a direct pipeline from your device to your selected AI provider.
This Privacy Policy outlines how your data is collected, stored, and transmitted when using Zenkai AI. Simply put: we collect none of your data on our own servers because we do not run any servers. All of your intelligence configurations, chat history, and credentials stay securely on your device.
Data Collection & Storage
Zenkai AI operates on a local-first architecture. Any data generated, configured, or entered by you is stored strictly in your device's secure local storage.
Secure Key Storage
Your API keys (OpenAI, Gemini, Claude, Groq, DeepSeek, Mistral, OpenRouter, and Tavily) are encrypted using AES-GCM encryption backed by the Android Keystore system. They are decrypted only in memory when making active API requests.
Local SQLite Database
Your chat sessions, message histories, custom system prompts, and custom personas are saved directly to an on-device SQLite database (Room). This database is entirely offline and isolated from other applications.
Local Document & Web Processing
When you provide PDFs, Images for OCR, or Web URLs, Zenkai AI extracts the text locally on your device or fetches the website content directly from your device. This extracted content is temporarily kept in memory and passed to your selected API provider to fulfill your prompts.
| Data Type | Storage Location | Encryption State |
|---|---|---|
| API Keys | Android DataStore (Local) | AES-GCM (Hardware Backed) |
| Chat History | SQLite Database (Local) | Sandbox Isolated |
| System Prompts & Settings | Android DataStore (Local) | Sandbox Isolated |
| Voice Logs (temporary) | Memory Only | N/A |
| Extracted Documents & URLs | Memory / SQLite Database | Sandbox Isolated |
App Permissions
To provide advanced features like voice-to-text input and network communications, Zenkai AI requests the following system permissions on your Android device:
- Record Audio (
RECORD_AUDIO): Required to use your device's microphone for voice dictation. Voice inputs are converted to text locally or passed securely to your configured API provider. Audio recordings are never stored on your device or sent to any central server. - Internet (
INTERNET): Required to establish HTTPS connections directly to your configured AI providers (e.g., Google, OpenAI, Anthropic, etc.) to fetch chat completions and perform web searches.
Third-Party Processing
Zenkai AI does not run a central backend. When you submit a prompt, the application communicates directly with the third-party AI provider you configured using your own personal API keys.
Depending on which model and service you select, your prompt and context data are transmitted via secure HTTPS to the corresponding service:
- Google Gemini API: Governed by Google's Developer Terms.
- OpenAI API: Governed by OpenAI's API Terms of Service.
- Anthropic (Claude) API: Governed by Anthropic's Commercial Terms.
- Groq / DeepSeek / Mistral: Governed by their respective API Terms.
- OpenRouter: Governed by OpenRouter's privacy policy.
- Tavily Search API: Used for optional Web Search functionality to retrieve current real-time data to answer prompts.
- Direct URL Scraping: If you input a website URL, your device directly connects to that website to read its content. The content is then sent to your chosen AI provider.
Note: Since data is sent directly to these platforms, we recommend reviewing the API terms of your selected provider to understand how they store or log your prompts.
Your Control & Deletion
Because all data remains on your device, you are in total control of your information. You can wipe all data easily at any time:
- Clear Settings: In the App Settings, you can remove individual API keys or clear your entire configuration.
- Delete Chat Sessions: You can delete specific chat sessions from the History screen, which purges them from the local SQLite database.
- Clear App Storage: You can completely wipe all settings, API keys, and databases instantly by clearing the app's cache and data through the Android System Settings.
Updates & Contact
We may update this privacy policy from time to time. Any changes will be reflected by updating the "Last Updated" date at the top of this page.
If you have any questions about this local-first privacy policy or the source code structure, feel free to inspect the app's repository or contact the developer directly.