BAK! — Privacy Policy

BAK! is designed with privacy at its core. All AI processing, conversations, documents, and embeddings are stored and processed locally on your device. We do not operate servers that collect, store, or process your personal data.

BAK! runs large language models (LLMs) directly on your iPhone or iPad using the llama.cpp inference engine. This means:

• No cloud inference: Your prompts and conversations are never sent to our servers
• Local storage: All conversations, documents, embeddings, model files, and settings are stored within the app's sandboxed container on your device
• No accounts required: BAK! does not require user registration or authentication
• No telemetry: We do not collect usage analytics, crash reports, or any form of telemetry

BAK! stores the following data locally in the app's Documents directory:

• Conversations: Chat history saved as JSON files
• Documents: Files you import for RAG (Retrieval-Augmented Generation)
• Embeddings: Vector representations of your documents and conversation memory
• Model files: GGUF model files you download or import
• Avatar assets: Videos, backgrounds, and persona configuration
• Settings: Your app preferences stored via UserDefaults

All of this data remains on your device and is removed when you delete the app.

BAK! offers optional features that connect to third-party services. These are disabled by default and require you to provide your own API keys:

• Remote LLM APIs: When you configure an OpenAI-compatible API endpoint (OpenRouter, OpenAI, etc.), your prompts are sent directly from your device to that service. BAK! does not proxy or store this traffic.
• Web Search: When enabled, search queries are sent to your chosen provider (Google CSE, Brave, DuckDuckGo, or SearXNG) directly from your device.
• Text-to-Speech: When configured, text is sent to your chosen TTS provider (OpenAI-compatible or ElevenLabs) for speech synthesis.
• Hugging Face: When browsing or downloading models, requests go directly to the Hugging Face API.
• MCP Servers: When you connect to Model Context Protocol servers, data is exchanged directly between your device and those servers.

Each of these third-party services operates under its own privacy policy. We encourage you to review them before use.

BAK! includes an optional local API server feature that exposes your loaded models as an OpenAI-compatible endpoint on your local network. This feature:

• Requires explicit activation by you
• Only operates on your local Wi-Fi network
• Does not expose any data to the internet
• Can be disabled at any time from Settings

The app requests local network permission solely for this feature and for connecting to local TTS services.

We collect no data.

BAK! does not include any analytics SDKs, advertising frameworks, or tracking mechanisms. We do not collect:

• Personal information
• Usage statistics
• Device identifiers
• Location data
• Crash reports
• Any form of telemetry

BAK! does not collect any personal information from anyone, including children under 13. Since all processing is local and no data is transmitted to us, the app is safe for users of all ages.

We may update this privacy policy to reflect changes in the app's features. Any changes will be posted on this page with an updated date. Continued use of the app constitutes acceptance of the updated policy.

If you have any questions about this privacy policy or BAK!'s data practices, please contact us:

• Email: [email protected]
• Website: skeskin.com

This privacy policy was last updated on March 6, 2026.