Privacy Policy
The short version: Pythona is a local-first development tool. It has no user accounts, content servers, or AI proxy, and its developer cannot see anything you write or run. Pythona collects no analytics and contains no tracking. When you choose to use the AI Assistant, however, relevant content is sent directly from your device to the AI provider or endpoint you selected. That traffic does not pass through a server operated by Pythona's developer.
1. Who we are
Pythona is independently developed and operated. If you have any questions about this policy, contact us at yosora2016@gmail.com.
2. What stays on your device
Except for content transmitted when you use the network features described in section 4, the following is stored and processed locally:
- Your scripts, notebooks, and files — stored on your device, or in your iCloud Drive / a folder you explicitly choose. We have no access to any of these locations.
- Console input and output, REPL history, and editor state.
- AI conversation history, saved connection details, and Custom Provider scripts and localStorage. API keys for built-in AI connections are stored in the iOS Keychain.
- Python packages you install (downloaded directly to your device, see section 4).
- App settings and preferences.
Pythona has no user account or sign-in. An AI provider may require its own authentication. Its developer runs no servers that store user content.
3. No analytics or tracking
Pythona collects no usage analytics. The app contains no analytics or tracking SDKs, sends no usage events of any kind — not even anonymous counts — and uses no advertising identifiers. In particular, through normal use of the app we never receive:
- Your code, files, file names, or any of their contents.
- Anything you type, run, or output in the app.
- Your name, email address, precise location, or any other personal details.
- Records of how or when you use the app, or which features you open.
Pythona contains no ads. Its developer does not track you across apps or websites, and has no usage data to sell or share because we do not collect it. AI providers and other services you choose to contact have their own practices, as described below.
4. Network connections and third-party services
As a development tool, Pythona makes network connections through features you choose to use:
- Package installation downloads packages directly from the Python Package Index (PyPI) or its mirrors.
- Git connects directly to the repository host you specify for operations such as clone, fetch, pull, and push. Repository data is exchanged with that host. HTTPS usernames and personal access tokens are stored in the iOS Keychain and supplied directly to the repository host when authentication is required.
- File Server starts only when you press Start and makes the currently selected file location available at the local-network address shown in the app until the server stops. It does not require an account or password: devices that can reach that address can browse, download, upload, rename, create, or delete files. Traffic goes directly between your device and the connecting client and does not pass through a server operated by Pythona's developer. Use this feature only on a network you trust.
- AI Assistant sends requests directly from your device to the AI provider or Custom Provider endpoint you select. Pythona supports OpenAI, Anthropic, OpenAI-compatible services, and user-supplied Custom Providers. Pythona's developer does not operate an AI gateway and does not receive or store these requests or responses.
- Web content and remote resources, including pages opened by browser tools and remotely hosted images displayed in content, connect directly to their hosts. Those hosts receive the network request and may receive your IP address or use cookies according to their own policies.
- Your own scripts may access the network — for example to call an API or download a dataset or model. That traffic goes directly from your device to whatever service your code contacts; it does not pass through us, and we cannot see it.
By choosing an AI connection and sending a message, you direct Pythona to transmit the data needed for that assistant task to the selected provider. Depending on what you ask the AI Assistant to do, requests may include:
- Your prompts, conversation history, selected model, and instructions made available to the
assistant, including project instructions such as
AGENTS.md. - Tool descriptions and results. Results may contain file and directory names, code or file contents, Python input and output, search queries, webpage URLs or content, or other data the assistant accesses while completing your request.
- The authentication credential required by your selected provider. Built-in provider keys are read from the iOS Keychain and sent only to that provider's configured endpoint.
The selected AI provider may receive network information such as your IP address and may process or retain request data according to its own terms, privacy policy, and your account settings. Review the policies for OpenAI, Anthropic, or the operator of any OpenAI-compatible or Custom Provider endpoint you configure. Pythona's developer does not control those services and cannot retrieve or delete data they retain.
Custom Providers run user-supplied JavaScript with network access and localStorage. A Custom Provider script controls its own authentication, requests, destinations, and response parsing, and can send data to servers chosen by that script. Only use Custom Provider scripts and endpoints you trust.
Other third-party services you contact from Pythona, such as PyPI or services called by your scripts, likewise handle your connection under their own privacy policies.
5. Device permissions
Pythona requests system permissions only when a feature you invoke needs them:
- Photos — when your script uses the photos module to pick or save images. Selected media is handed to your script on device.
- Camera and microphone — when your script uses them (for example in interactive scene demos). Captured data is processed on device by your script.
- Apple Health — when a Python script you run requests access, Pythona asks iOS for permission to read or write the requested health and fitness data types. Health data is provided locally to the script; Pythona's developer does not receive it.
- iCloud Drive / Files — when you choose to store your scripts there.
None of this media or data is automatically transmitted to Pythona's developer. It may be transmitted to a third party when you run a script that accesses the network or use an AI Assistant task as described in section 4.
6. Purchases
Pythona Pro is a one-time purchase handled entirely by Apple's App Store. We never receive your payment details. Your purchase status is verified on device through Apple's StoreKit framework, and free-trial state is stored locally on your device.
7. Data retention and your choices
Other than information you voluntarily provide when contacting the developer, Pythona's developer holds no data about you — no accounts, analytics, AI conversations, or server-side profile. You control locally stored files, conversations, and provider configurations through Pythona and iOS. Removing a built-in AI connection removes its API key from the Keychain; removing a Custom Provider removes its script and localStorage.
Data sent to a third-party AI provider or another service is subject to that service's retention and deletion controls. Contact the service operator or use its account controls to request access to or deletion of data it retains.
8. Children
Pythona does not knowingly collect personal information from anyone, including children. The app contains no ads, no social features, and no user accounts. Third-party AI providers may impose their own age requirements and parental-consent rules.
9. Changes to this policy
If we change what data the app handles — for example when introducing new features — we will update this policy and the date at the top of this page before the change ships. Significant changes will also be noted in the App Store release notes.
10. Contact
Questions or concerns? Email yosora2016@gmail.com. If you contact the developer, the developer receives your email address and the information in your message and uses it only to respond, provide support, and maintain necessary records. You may ask for that correspondence to be deleted unless it must be kept for legal or security reasons.