Privacy Policy

Last updated: 27 September 2026

This policy covers two separate things: the Pangu mobile app, and this website (mypangu.ai). They handle data very differently, so we’ve kept them in separate sections below.

1. The Pangu app

Pangu runs on your device by default. Getting access requires an account — your name, phone number and email address, described in Section 2 — but with the default settings, nothing you then say, write, or store in Pangu passes through any server, and there is no cloud copy of your conversations, documents, memory, or voice. Specifically:

• Conversations, voice, and documents are processed on-device by the language model stored on your phone. None of it is uploaded anywhere — unless you turn on the optional cloud AI described in Section 4, which is off until you switch it on.
• Personal memory (things you’ve told Pangu, like preferences or facts about people in your life) is stored only on your device.
• Documents you upload are indexed and searched locally, on your device. Removing a file deletes Pangu’s local index of it. The file itself is never uploaded; with cloud AI on, excerpts of a document can travel inside a message, as explained in Section 4.
• History — your past conversations and the actions Pangu has taken — is stored only on your device.
• Wake word detection, if enabled, listens locally and does not record or transmit anything while idle.
• Photos, if you choose to index them, are read for their metadata only — never their contents. See below.

Pangu needs a network connection for the one-time language model download on first launch, and, if you choose to enable it, an optional larger speech-recognition model described in Settings. Neither transmits your personal data — they are one-way downloads of the model itself.

What leaves your device

The complete list, and when:

• Your phone number — once, at setup, to send you the SMS verification code.
• Your name and email address — to check your early-access eligibility (Section 2).
• Stability and crash information — as described below.
• The content of the messages you send — only when you have turned on the optional cloud AI, which is off by default. See Section 4.
• Data needed for a connected app — only if you link an internet app and ask Pangu to do something with it. See Section 4.
• Your microphone audio — only during a voice call with a connected app, streamed live for the length of that call. No other feature sends audio. See Section 4.

Nothing else does. In particular, your photos, documents, memories and conversation history stay on your device.

Uninstalling the app removes everything Pangu stored on your phone. With cloud AI off, there is no cloud copy to delete, because none was ever made.

Photos

Pangu can build a searchable timeline of where you have been — part of the Life Graph — so you can ask things like “where was I on the 18th?”. This is optional: it happens only if you start it yourself and grant photo access, and Pangu works normally without it.

When you do, Pangu reads metadata only: the date each photo was taken, and the location recorded in the photo’s EXIF data. It converts those into dates and places in the timeline.

The photos themselves are never read, copied, uploaded or transmitted. Pangu does not look at the image itself — only the two pieces of information attached to it. The indexing and every search across it happen entirely on your device, and nothing about your photos leaves it. That remains true whether or not the optional cloud AI in Section 4 is switched on.

Device permissions

To do the things described in the app (placing calls, reading or creating calendar events, setting reminders, drafting texts and emails, opening other apps), Pangu asks for the relevant device permissions — for example contacts, calendar, phone, photo and microphone access. What Pangu reads through them is used only to carry out the specific action you asked for, and is processed on your device. The two exceptions are both described in Section 4 and both need you to switch something on first: message text when cloud AI is enabled, and microphone audio during a voice call with a connected app. You can review or revoke any permission at any time in your phone’s system settings.

Crash reports and diagnostics

Two different things, worth separating because one carries your details and the other never does:

• A stability check, sent automatically each time you open the app. It records whether the previous session ended in a crash, the app version, your operating system and its version, and a rough device tier (roughly, how much memory your phone has). It carries no name, no email address, no phone number, and nothing that identifies you or your device — we use it only to measure how often Pangu crashes across everyone using it.
• A crash report, sent only when you tap “send report”. Nothing is sent unless you choose to. Because we need to be able to write back to you about the problem, this one does include your phone number and email address, along with recent log lines from the app, error and stack-trace details, counts of past crashes, and any note you add. Log lines are scrubbed of content we can detect before sending.

Neither report ever contains your conversations, your documents, your memories, or anything Pangu has heard through the microphone. Those stay on your phone. We use both only to find and fix faults, and we do not sell or share them.

2. This website (mypangu.ai)

This marketing site is much simpler than the app, and collects much less:

• Early-access signup. When you request early access — either through the “Join early access” form here or from the app itself — we collect and store your name, phone number and email address, together with how you heard about Pangu and whether your access has been approved. We use them for one thing: running the early-access list and contacting you about Pangu. Your phone number also verifies that a request is really yours, by SMS code. We do not sell this information or share it with third parties, and we do not use it for advertising.
• No cookies, no analytics, no tracking scripts. This site does not run Google Analytics, advertising pixels, or any other visitor-tracking script.
• Standard hosting logs. Like virtually any website, our hosting infrastructure (Cloudflare) may retain standard connection logs (such as IP address and request timestamps) for security and operational purposes. We don’t separately access or analyze this data for tracking purposes.

3. Requesting deletion

You can delete your early-access account yourself, at any time, from mypangu.ai/delete-account. Verify your phone number with an SMS code and the record — name, phone number, email address and all — is deleted immediately and permanently. You do not need the app installed to do this.

One thing that page does not reach: if you ever sent us a problem report, it is stored separately and carries your phone number and email address. Email support@haiva.ai and we will delete those as well.

If you would rather not use that page, email us at support@haiva.ai from the address you signed up with and we will delete it within 30 days.

On the app side, your conversations, documents and memories are stored on your phone, not by us, so uninstalling the app removes them. If you have used cloud AI, the message text sent while it was on was processed to produce your replies; write to support@haiva.ai if you want us to confirm what, if anything, is retained for your account.

4. AI processing and third parties

On-device by default

Out of the box, Pangu’s AI runs on your device. Your conversations, documents, memories and voice are processed locally and are not uploaded — not to Haiva, and not to any AI provider. If you never change this setting, that remains true for as long as you use Pangu.

Cloud AI (optional, off by default)

Pangu also offers a cloud AI mode. It is off until you turn it on yourself in Settings, and you can switch back to fully on-device at any time. While cloud AI is on, this is what happens:

• The text of the message you send is transmitted in order to generate the reply. Your app sends it to a Haiva-operated server, which forwards it to a third-party AI provider — currently OpenAI — and streams the reply back to you.
• The AI provider’s API key lives only on Haiva’s server, never inside the app.
• The provider acts as a data processor on our behalf. The content is used to produce your reply, and is not used to train the provider’s models.
• Voice stays on your device in this mode. Speech-to-text and text-to-speech both run locally, and only the resulting transcript text is sent — no audio is transmitted by cloud AI. (Voice calls to a connected app work differently; see “Connected apps” below.)
• Documents stay on your device. Indexing and search are local. When cloud AI is on and a document is used as context for your question, relevant excerpts of it may be included in the message sent to the AI provider.

Turning cloud AI off returns Pangu to on-device processing for everything above.

Bring your own key (optional)

You can instead supply your own AI provider key. In that mode requests go directly from the app to that provider using your key, without passing through Haiva’s server. Your relationship and that provider’s terms then govern what they do with the content.

Connected apps (optional)

If you link an internet app to Pangu and ask it to carry out an action, the data needed for that action is sent through Haiva’s connector service to that app. This happens only when you have linked the app and asked for the action.

Voice calls with a connected app send your audio. When you hold a spoken conversation that a connected app handles, your microphone audio is streamed live to Haiva’s voice service for the duration of the call, and the spoken reply is streamed back. This is the one case where recorded audio — not just a transcript — leaves your device, and it happens only during a call you have started with a connected app. Ordinary conversations with Pangu do not work this way.

Third parties and sub-processors

• OpenAI — AI provider, used to generate replies only while cloud AI is enabled. Receives the message text you send, including any document excerpts used as context. Does not receive your name, phone number, email address, raw audio, or your stored documents and memories.
• Any provider you choose under “bring your own key” — receives the same message content, directly from your app, under your own account with them.
• Apps you connect yourself — receive only the data needed for the action you asked for. During a voice call with a connected app, your microphone audio is streamed through Haiva’s voice service for the length of the call.

With cloud AI off and no connected apps, no third party receives anything from Pangu. We do not sell your data, and we do not share it for advertising in any mode.

5. Children’s privacy

Pangu is not directed at children under 13, and we do not knowingly collect personal information from children through this website.

6. Changes to this policy

If this policy changes in a meaningful way, we’ll update the date at the top of this page.

7. Contact

Questions about this policy or how Pangu handles data can go to support@haiva.ai.