Privacy Policy

Our Own Practices

We do not use your chat content or usage data for analytics. We do not keep visitor, request or IP address logs for the Cedar website or for Cedar skill downloads.

These statements describe our own practices. They do not describe Apple, model providers, search services, download hosts, websites, hosting or network providers, or hosts you configure. Those services may process, log or retain information under their own practices and your account settings with them.

On-device and Remote Processing

Downloaded on-device models and Cedar's Apple Intelligence model integration process model requests on your device. Connected tools, downloads, storage synchronization and speech features can involve external services even when you use an on-device model.

Ollama sends requests to the server address you configure, which can be another computer or a remote host. Companion sends requests to your configured Companion host and its model backend. N8N sends prompts and conversation history to the configured webhook and its workflow. These paths can move information off your phone even if you operate the receiving computer yourself.

Cloud model and agent features send requests to OpenAI, Google Gemini or Anthropic, as applicable. Depending on the feature and supported inputs, requests can include messages, conversation context, instructions, generation settings, files, images, skills and tool results. Uploaded files and skills can become separate resources in your provider account. Connected workflows and hosted tools can involve additional recipients.

Saved Information and iCloud

Cedar saves conversations, settings, skills, recording information, generated-image information and agent configurations locally. This saved information is set up to synchronize through your iCloud account using Apple's CloudKit where available. Whether it synchronizes depends on your Apple account, iCloud settings and device conditions.

Data Library tables and notes use a separate local database. Some image, audio and generated files are stored separately on the device. Cedar does not promise that the Data Library or these separately stored files will synchronize between your devices. Information stored on your device may also be included in device backups, depending on your backup settings.

Data Library and Tool Results

Cedar's Data Library tools can return table descriptions, column information, row values and note text to the model answering your request. With a remote model, those results can be sent to OpenAI, Gemini, Anthropic or your configured Ollama or Companion host. Conversation history sent to an N8N webhook can include earlier tool results. Other tool results, including search results and location information, can also become model context and saved conversation content. A tool that runs on your device can still produce results that leave your device.

OpenAI Responses and Hosted Agents

For ordinary OpenAI chat, including tool continuations, Cedar asks OpenAI to store background responses so generation can continue if your connection drops and responses can be recovered. OpenAI hosted agents also use persistent remote agent and session resources. Cedar sends agent configuration, messages, selected skills and session settings, along with random installation ownership and recovery identifiers. These identifiers are random, but they do not make you anonymous and may be associated with your provider account. Anthropic Managed Agents also use remote sessions and uploaded files in your Anthropic account.

For the hosted browser, Cedar sends your website-access approval decisions to OpenAI. When you explicitly submit browser sign-in fields or a sign-in option, those values are sent to OpenAI for the hosted browser; fields may include usernames, passwords or other requested information. Websites used by the hosted browser can receive information through its interactions. Approving website access and submitting sign-in information are separate actions.

Recording, Transcription and Dictation

Notetaker records locally and requires on-device transcription. If you choose a remote model for a meeting summary, Cedar sends the transcript and the meeting context you provide, such as a title, attendees, notes and organizational context, to that model's service or configured host.

Chat dictation uses Apple Speech Recognition and permits Apple server processing. It does not have the same local-only transcription requirement as Notetaker. Dictated text can also be sent to the model used for your chat.

Optional Services and External Requests

Location, maps and weather tools use Apple services for relevant coordinates, place queries, directions and forecasts. Location access can include precise coordinates when authorized. Optional web search sends queries and search options to the selected Tavily or Firecrawl service, or uses search provided by the selected cloud model. Results can be sent onward to the model answering your request.

Model and skill downloads contact external hosts, including Hugging Face and Cedar's skill storage host. Opening the Skills screen can refresh the curated catalog and download missing curated skills automatically. Opening remote privacy-policy, citation or other web links contacts the destination website. Remote weather attribution can also load external content. Each of these recipients receives your network request. Apart from our own practices described above, recipients, including hosting and network providers, handle requests under their own logging and retention practices.

Permissions and Feature Choices

Microphone and speech-recognition permissions support recording and dictation. Location permission supports tools that use your current position. Camera access supports profile photos, Companion pairing codes and supported chat photos; the system photo picker lets you select images. Photo-library-add permission supports saving images. Selected image attachments can be included in supported remote-model requests. Local-network permission supports your selected Ollama and Companion hosts, and alarm permission supports requested alarms and timers. You can change device permissions at any time in your device's Settings app and choose which models, hosts, attachments and optional features to use. These choices affect data flows, but a device permission prompt is not a separate approval for every network request. Tools and connected services may send information while carrying out a request.

Retention and Deletion

How long information is kept depends on the recipient, the resource, your account settings and the applicable service terms. Whether a provider retains your content, for how long, and whether it uses content to train models vary by service, feature, account type and terms. We cannot state each provider's retention periods, and this policy does not claim that providers never store content or never use it for training. Review each provider's privacy policy and account settings for details.

Deleting a local chat or file does not necessarily delete remote responses, uploaded files, skills, hosted resources, backups or information received by websites and configured hosts. Cedar has separate controls that request deletion of applicable OpenAI agents and remote sessions. Cedar can also request deletion of uploaded Anthropic files; removing a managed agent in Cedar does not delete its remote sessions. A deletion request sent from Cedar does not guarantee immediate deletion from every recipient's systems. Use the relevant recipient's account controls and policies to manage remote information.

Contact and Privacy Requests

For privacy questions or deletion requests, email Info@mdwoodruff.me. Much of your information is stored on your device, in your iCloud account, or in accounts and hosts you connect, such as model provider accounts. We may not be able to access or delete information held there; use those services' own controls to manage it.