Isla AI · 2026-11-13
Privacy policy
Local account isolation
Each Apple identity has separate local profiles, AI conversations, photos, tasks and tool preferences, without cloud sync. Records and tasks are inaccessible until sign-in verification completes. Sign-out stops generation, clears private sessions and removes this app’s task notifications. Older unlinked records require confirmation of ownership and can be linked to only one account. The original copy is retained until that account deletes a AI conversation or task, or clears its records, when it is also removed.
Private AI session
Private text, drafts, images and tool results stay in memory, outside history, search and automatic tasks. They cannot be recovered after ending, backgrounding or exit. Cloud requests remain subject to provider retention policies, disclosed before each send. Copies, exports, screenshots, saved memories and confirmed external actions create separate records that are not cleared when the interaction ends.
Health, Home and background generation
Health queries request read access only to the confirmed type. No health writes or uploads; results stay in local AI conversations. Home queries and light or outlet controls require confirmation each time; accessories may connect through a home hub. Background GPU is off by default and only continues user-initiated generation allowed by the system, with visible progress and cancellation.
Local first
Anonymous local AI needs no sign-in, keeps no history and has no tools. Apple sign-in opens an isolated local workspace and optional cloud services. Processing is local by default. Only after you configure and select a cloud service does the device send confirmed content directly to it. There are no ads, tracking or analytics SDKs.
When the app goes online
Cloudflare delivers models and public resources, processing network information such as IP addresses and request times without linking Apple identity or tracking. A chosen cloud provider directly receives current input, authorized cloud context and confirmed images, and may retain and charge for them under its policies. Review its terms. Keys stay in the local Keychain and never pass through Cloudflare. There is no web search. Weather and maps send necessary locations to Apple after confirmation.
Photos and permissions
Camera access is requested only when taking a photo; the system picker provides only selected images. Images are resized and stripped of source metadata, with recognition local by default. Cloud settings must allow images and sending requires confirmation. Saved images remain with the local interaction. Reminders need notification permission; refusing it does not affect text questions.
Storage, export and deletion
Records, memories with revisions and daily model usage stay local and are excluded from cloud backup. Memories are excluded from cloud requests and can be viewed, edited, restored or deleted on a timeline. Deleting an interaction does not delete saved memories. Usage records only date, provider, configuration, model and counts, including private aggregates without original text. Missing usage is marked unknown. Account deletion removes its data and API keys while keeping other accounts and shared models. Uninstalling loses files; safeguard important content yourself. Provider copies follow their policies.
Your choices
System tools are off by default. Enable battery, location and heading, motion, maps, external apps, calendar, reminders and weather independently. Every read or action shows a confirmation page; review titles and dates before creating events or reminders. Cancelling performs nothing. Disable tools or revoke permissions anytime. Results stay in local AI conversations and are removed with them.
Policy updates
Policy version: 2026-11-13. We update this notice before changing data uses or storage and obtain authorization where applicable. Operator and support details are in the app and on the public support page.
Apple Account
Sign in with Apple is optional. Only the user identifier is kept in this device's Keychain. No name or email is requested, no cloud account is created and no identity, authorization code or token is sent to Cloudflare. Sign-out retains the local workspace; account deletion removes its data and local credentials. No revocable access or refresh tokens are held. Revoke Apple authorization manually in system settings under Sign in with Apple; instructions appear after deletion. Keychain items may survive uninstalling, so sign out or delete the account first.
上海秩量科技有限公司 · Contact support