WhattaRAG Privacy Policy

The short version

WhattaRAG stores your documents, conversation history, and AI-generated embeddings in a database on your device. Nothing is transmitted to AltoCode, and no document, question, or answer is ever sent anywhere to be processed.

There is exactly one outbound network request in the app, and you have to ask for it: Add by URL. When you paste a link, WhattaRAG fetches that page so it can read it. The request goes to the address you pasted and nowhere else, it carries no identifier of you or your device beyond what any request necessarily reveals, and it happens only at the moment you add the link — never in the background, and never again afterwards. The text it returns is stored on your device like any other document.

There are no analytics, no crash reporters, no advertising SDKs, no accounts, and no sign-in. The only data that exists anywhere is the data you create, on the device in your hand.

What the app stores

Everything WhattaRAG stores lives in an SQLite database inside your iOS app sandbox — a private, device-local location that other apps cannot access. Specifically:

• Documents: text and markdown files you import or paste into the app.
• Chunks and embeddings: excerpts of your documents and their numerical vector representations, used to find relevant passages when you ask a question.
• Conversations and messages: the questions you ask and the answers the app generates.

iOS encrypts the app sandbox at rest using the device's hardware security. This encryption is automatic and controlled by iOS, not by WhattaRAG.

What leaves your device

Your documents, your questions, and the answers: nothing.

The single exception is the request described above, made only when you add a document by URL. That request tells the site you are fetching that someone asked for that page — which is unavoidable for any app that can open a link — and it reveals your IP address to that site, exactly as a browser would. It tells that site nothing about your other documents, your questions, or your conversations, because none of that is included. If you would rather not make the request at all, do not use Add by URL: every other way of adding a document is entirely offline.

WhattaRAG performs all AI inference on-device using Apple system frameworks — Apple Intelligence (Foundation Models) for language generation and Apple's Natural Language framework for embedding. These are built into iOS and run entirely on your iPhone's hardware. Your documents and questions are never sent to a server to be processed.

Apple's own privacy policy governs the system-level frameworks provided by iOS. WhattaRAG does not control or observe how those frameworks operate internally.

No analytics, no diagnostics, no third-party SDKs

The app contains no analytics library, no crash reporter, no advertising SDK, and no telemetry of any kind. AltoCode does not collect usage data, error logs, or diagnostic information from WhattaRAG — automatically or otherwise.

If something goes wrong and you want to report it, you can contact us directly at the address below.

No accounts or sign-in

WhattaRAG does not have accounts, user profiles, or sign-in. There is no identifier associated with you. AltoCode has no way to connect any data to any individual user, because no data reaches AltoCode at all.

How to delete your data

You have two options:

• Clear all data from Settings: Open the app, go to Settings, and tap "Clear all data". This deletes all documents, embeddings, and conversations immediately and returns the app to its initial state.
• Delete the app: Removing WhattaRAG from your device deletes the entire app sandbox, including the database and all its contents. iOS does this automatically when you uninstall an app.

There is no remote copy to delete because no remote copy exists.

Changes to this policy

If this policy changes in a meaningful way — for example, if a future version of the app adds optional cloud features — the updated policy will be posted here with a revised date. The core commitment (on-device processing, no data collection) will not change without prominent notice and an explicit opt-in from you.

Contact

Questions about this policy or the app's data handling: contact@altocodelabs.com

Last updated: September 10, 2026