Privacy Policy

The short version

Scope

This policy covers the MeshVault Android app, package net.meshvault.android, from The Fire Dev LLC d/b/a MeshVault. The iPhone app has a separate policy. This app is an independent client for a user-managed Hermes Agent gateway, not a hosted MeshVault chat account. It is not affiliated with Nous Research.

This Android build has no analytics, no advertising, no in-app purchases, and no embedded tracking or crash-reporting SDK. We do not operate your gateway or receive your app messages. This does not mean your information never leaves the device: you direct it to your gateway.

Information on your device

• Settings and runs. Gateway names and addresses, local settings, and conversation run snapshots are saved in private app storage. Run text is stored there without an additional encryption layer.
• API keys. Gateway API keys are encrypted using an AndroidKeyStore-backed AES-GCM key. The app disables Android backup and data extraction for its storage.
• Selected files. Selected photos, documents, and videos are processed for attachment when you choose to send them. The app does not upload your whole photo or file library.

Removing a gateway removes its saved settings and key on this device. Uninstalling the app removes its local data. Neither operation necessarily deletes copies already held by the gateway or its providers.

Information sent to your gateway

The app authenticates using your API key and requests the gateway's model choices, session list and chat history, skills, scheduled jobs, and run status. When you act, it sends your typed or dictated prompts, chosen model, user-selected attachments, session creation, rename, fork and delete requests, job creation, edit, pause, resume, run and delete requests, run steering or stopping, and your explicit approval choices. It receives replies and streamed activity from that gateway.

Your gateway can keep sessions and scheduled jobs and pass content to AI providers or connectors selected by its operator. Their privacy and retention practices are outside this app's control. Contact your gateway operator to understand where data goes after it arrives.

Files and voice

A system document picker supplies only the files you select. The app resizes selected images and sends image data. It extracts text from PDF and text files locally and sends that text. For a selected video, it sends one still frame, not video motion or audio. It sends these only when you send the message.

Voice input invokes an installed Android speech-recognition provider. That provider may process speech on-device or on its own servers under its own terms. The app receives recognized text, not raw microphone recordings, and sends that text only when you send a message. The app itself does not request microphone permission.

Network transport

With HTTPS, connections use Android's standard certificate trust. The app also permits HTTP for an owner-managed LAN or tailnet and shows a plaintext warning. HTTP traffic is unencrypted, including the API key and message content. Use HTTPS on untrusted networks.

Deletion and changes

You can remove local gateways and ask your gateway to delete individual sessions and scheduled jobs from the app. Gateway or AI-provider retention and deletion depend on those operators. There is no MeshVault Android account to close. We will post policy changes here and update the date above.

Children

This app is intended for people who operate their own AI gateway. It is not directed to children.

Contact

Questions about this app's behavior go to The Fire Dev LLC, which does business as MeshVault. MeshVault is one operator, not a 24-hour help desk.