WhattaRAG Privacy Policy
Your documents and conversations never leave your device. That's not a policy position — it's how the app is built.
The short version
WhattaRAG stores your documents, conversation history, and AI-generated embeddings locally in a database on your device. Nothing is transmitted to AltoCode, to any third-party server, or anywhere else. The app makes no outbound network requests of any kind.
There are no analytics, no crash reporters, no advertising SDKs, no accounts, and no sign-in. The only data that exists anywhere is the data you create, on the device in your hand.
What the app stores
Everything WhattaRAG stores lives in an SQLite database inside your iOS app sandbox — a private, device-local location that other apps cannot access. Specifically:
- Documents: text and markdown files you import or paste into the app.
- Chunks and embeddings: excerpts of your documents and their numerical vector representations, used to find relevant passages when you ask a question.
- Conversations and messages: the questions you ask and the answers the app generates.
iOS encrypts the app sandbox at rest using the device's hardware security. This encryption is automatic and controlled by iOS, not by WhattaRAG.
What leaves your device
Nothing.
WhattaRAG performs all AI inference on-device using Apple system frameworks — Apple Intelligence (Foundation Models) for language generation and Apple's Natural Language framework for embedding. These are built into iOS and run entirely on your iPhone's hardware. Your documents and questions are never sent to a server to be processed.
Apple's own privacy policy governs the system-level frameworks provided by iOS. WhattaRAG does not control or observe how those frameworks operate internally.
No analytics, no diagnostics, no third-party SDKs
The app contains no analytics library, no crash reporter, no advertising SDK, and no telemetry of any kind. AltoCode does not collect usage data, error logs, or diagnostic information from WhattaRAG — automatically or otherwise.
If something goes wrong and you want to report it, you can contact us directly at the address below.
No accounts or sign-in
WhattaRAG does not have accounts, user profiles, or sign-in. There is no identifier associated with you. AltoCode has no way to connect any data to any individual user, because no data reaches AltoCode at all.
How to delete your data
You have two options:
- Clear all data from Settings: Open the app, go to Settings, and tap "Clear all data". This deletes all documents, embeddings, and conversations immediately and returns the app to its initial state.
- Delete the app: Removing WhattaRAG from your device deletes the entire app sandbox, including the database and all its contents. iOS does this automatically when you uninstall an app.
There is no remote copy to delete because no remote copy exists.
Changes to this policy
If this policy changes in a meaningful way — for example, if a future version of the app adds optional cloud features — the updated policy will be posted here with a revised date. The core commitment (on-device processing, no data collection) will not change without prominent notice and an explicit opt-in from you.
Contact
Questions about this policy or the app's data handling: contact@altocodelabs.com
Last updated: May 27, 2026