Legal

Privacy Policy

Last updated: November 15, 2026

The short version: In PRIVAKU apps and browser tools that run on your device, your photos, files and on-device AI prompts stay on the device. They are not uploaded for AI processing. Some products use a network service. PRIVAKU Talk, in particular, uses a relay and a sign-in email; that is described below and in Talk’s own policy. This website counts visits with Cloudflare Web Analytics, which uses no cookies, and with Google Analytics, which sets cookies only if you accept the cookie banner. The public MCP endpoint also sends usage counts to Google Analytics, as described below.

About PRIVAKU

PRIVAKU (プリバク) is an on-device, offline LLM initiative to bring AI to the masses, without heavy token costs or privacy risks. This policy covers this website (privaku.com), the developer site (dev.privaku.com), the free browser tools on privaku.com, and a summary of PRIVAKU products. Each product’s own privacy policy, and its App Store or Google Play privacy label, take precedence over this page for that product.

Product policies:

The terms of use for this website and the free tools are on a separate page.

Your content on the device

PRIVAKU Photos, AI Action App, the free browser tools, PRIVAKU Eye, PRIVAKU Shield and PRIVAKU Brain are built so that photo, file and on-device AI processing happen on your device. Those products do not upload your photos, files or on-device prompts to PRIVAKU or to a third-party AI service for inference. Some of them use the network for other reasons, such as downloading models or feature settings, or sending content-free crash and usage data. Those cases are described in each product’s policy.

PRIVAKU Talk is different: it is a messenger that uses a relay. See “PRIVAKU Talk” below.

PRIVAKU Photos

All photo analysis runs on your iPhone, and your photos never leave it. The app uses Firebase Analytics (usage stats) and Firebase Crashlytics (crash reports), on by default; you can turn both off in Settings > Share anonymous analytics. It also uses Firebase Remote Config to download feature settings; this is not affected by that switch. None of these include your photos or their content, and the app does not use the advertising identifier. See the PRIVAKU Photos privacy policy.

AI Action App

Text recognition and extraction run on your iPhone. Optional crash reports and analytics are off by default. If you choose an optional model download, the app fetches model files from Hugging Face; that download does not include your content. See the AI Action App privacy policy.

PRIVAKU Talk

PRIVAKU Talk is a messenger for people and their AI agents, at talk.privaku.com. You sign in with a 6-digit code sent to your email. The general statements on this page about “content never leaving your device” and “no servers that receive your content” do not apply to Talk in the same way they apply to on-device apps.

Chats between people, and with agents running on your own computer, are end-to-end encrypted; the relay holds encrypted data it cannot read. Public Drops, and chats with a third-party AI app you choose to connect (for example ChatGPT or Claude), are not end-to-end encrypted against the relay. Talk may store your sign-in email, account and device metadata, delivery metadata, and, if you use them, push tokens, encrypted chat backups, and a Google account link. Firebase crash reports and usage analytics are on by default in Talk 1.1; you can turn them off in Settings. The complete description is in the PRIVAKU Talk privacy policy. The Talk terms of service also apply to Talk.

PRIVAKU Eye, Shield, Brain SDK and Infinite

Short privacy pages for Eye, Shield, Brain SDK and Infinite describe only what the public product pages already state. Infinite is listed as coming soon; its page will be updated before it is offered for download.

Free browser tools

The tools at privaku.com/tools run in your browser. Your photos and files are processed on your device and are not uploaded to PRIVAKU for processing. A tool may download libraries or language models the first time you use it (for Translate, models may be fetched from Hugging Face). After that, many tools can keep working without a connection. The Translate tool also uses open-source models credited in NOTICES.md. If you choose an optional street map, map tiles are loaded from OpenStreetMap after you click, as described in those notices.

Network use

Some PRIVAKU apps use the network to download AI model files and app resources, or, where an app’s policy says so, to send content-free crash and usage data. None of those requests contain your photos or on-device file contents. Talk uses the network to deliver messages and provide the service, as described in its own policy. Purchases, if any, are handled by the app store you download from, under its own privacy policy; PRIVAKU receives no payment details.

No ad tracking

The website host may keep standard, short-lived server logs (such as IP address and pages requested) for security and reliability. PRIVAKU does not use these logs to identify or profile you.

Website analytics and cookies

日本語

This section covers ordinary page views on privaku.com and dev.privaku.com. PRIVAKU apps are not affected. To count visits per page and per day, privaku.com uses Google Analytics 4, provided by Google LLC (Google Ireland Limited for visitors in the EEA and UK), in Google Consent Mode. Analytics cookies are set only if you click Accept in the cookie banner. If you decline or ignore the banner, the Google script still loads, but it sets no cookies and uses no browser ID. For each page view it sends Google a cookieless ping with the page and device details listed below, which Google uses only for aggregated and modeled counts. Advertising storage and ad signals are always off.

If you accept, Google Analytics sets these first-party cookies on privaku.com:

For each page view, your browser sends Google the page address and title, the referring page, the time, screen size, browser and operating system, language, and a coarse location (country, region, city) that Google derives from your IP address. Google Analytics 4 does not log or store IP addresses. PRIVAKU does not send user IDs or any personal data with these page-view events, Google signals and ad personalization are off, the data is not linked to Google Ads, and it is kept for 2 months, the shortest period Google offers. It is used only to see total visits per page and per day.

Cloudflare Web Analytics. To count total visits, privaku.com and dev.privaku.com also use Cloudflare Web Analytics, provided by Cloudflare, Inc. It uses no cookies, no local storage and no fingerprinting, and it does not track you across sites. For each page view, your browser sends Cloudflare the page address, the referring page, the browser and operating system (user-agent) and page-load performance timings. Cloudflare derives a country from your IP address and does not use your IP address or browser details to identify or fingerprint you. It runs on every page and does not depend on the cookie banner. See Cloudflare’s Privacy Policy.

The legal basis for these page-view cookies is your consent. Cloudflare Web Analytics and the cookieless Google pings are used on the basis of PRIVAKU’s legitimate interest in counting visits; you can block both with a content blocker. You can change your choice at any time with the Cookie settings link at the bottom of every page; declining removes the analytics cookies. You can also block Google Analytics with a content blocker or the Google Analytics opt-out add-on. Your choice is stored in your browser’s local storage (privaku-analytics-consent), not in a cookie. Google’s handling of this data is described in Google’s Privacy Policy and how Google uses information from sites that use its services. Data may be processed in the United States under Google’s EU-US Data Privacy Framework certification and Standard Contractual Clauses.

Public MCP endpoint

The read-only MCP server at privaku.com/mcp returns public information that is already on this website. It does not require a login or API key. PRIVAKU does not store or log the request body, tool arguments or query text, and the server sets no cookies.

The server does send a usage count to the same Google Analytics 4 property, from the server, using Google’s Measurement Protocol. That count includes the MCP method, the tool name, a client type or name (from the user-agent or the client info the MCP client sends), protocol version, and whether the call succeeded. It does not include the request body, tool arguments, query text or IP address. A daily hash of the client user-agent is used so the counts can be grouped. This server-side count does not use the cookie banner and is not turned off by declining website analytics cookies.

Email

If you send email, for example to join a waitlist or ask for support, PRIVAKU receives your email address and message. It is used only to reply or to send the notice you asked for, and it is deleted on request.

Children

PRIVAKU does not knowingly collect personal data from children for the purpose of offering these products to them. Some apps send content-free usage or crash data, as described in each app’s policy. Talk requires a sign-in email and is not directed at children.

Changes

If this policy changes, this page and the date above will be updated.

Contact

Questions about privacy: hello@privaku.com