Legal

Privacy Policy

Last Updated: August 19, 2026

1. Introduction

This Privacy Policy describes how Moonlight AI ("Moonlight AI," "we," "us," or "our") handles information in connection with the Moonlight AI Android application ("the App").

Moonlight AI is a local-first AI assistant. The App is designed to process information on your device rather than transmitting it to external servers. We encourage you to read this policy to understand exactly what data flows exist.

2. Information We Do Not Collect

The following data is never collected, transmitted, or stored on any server operated by Moonlight AI:

  • Your conversations with the AI
  • Your memories, notes, or documents imported into the App
  • AI prompts or responses
  • Voice recordings or transcriptions
  • Images captured with the camera
  • Usage analytics or behavioral data
  • Crash logs or diagnostic reports
  • Device identifiers or advertising IDs

The App does not include analytics SDKs (such as Firebase Analytics, Mixpanel, or Amplitude), crash reporting services (such as Firebase Crashlytics or Sentry), or advertising frameworks.

3. Data Stored Locally on Your Device

The App stores the following information locally in a SQLite database on your device (located within the App's private application documents directory):

  • Workspaces: Names and timestamps of workspaces you create
  • Conversations: Chat conversation titles and timestamps
  • Messages: Chat messages (your inputs and AI responses)
  • Memories: Context extracted from conversations, stored with vector embeddings
  • Knowledge Graph: Entity-relationship data extracted by the local AI model
  • Media File References: Paths to files you import
  • Installed Models: Information about AI models you have downloaded

App preferences (such as theme selection and whether biometric lock is enabled) are stored in Android SharedPreferences and device secure storage. All data remains on your device and is not backed up to any Moonlight AI server.

4. AI Model Processing

AI inference is performed locally on your device using the llama.cpp runtime. Your prompts, conversation history, and retrieved memories are processed locally and are not transmitted to any external AI service or API.

5. Model Downloads

When you download an AI model through the Model Store, the App connects to Hugging Face (huggingface.co) to retrieve the model file. This is the primary network operation performed by the App during normal use. The download is subject to Hugging Face's privacy practices. After a model is downloaded and installed, it is stored locally on your device.

Model downloads include SHA-256 checksum verification to ensure file integrity. No personal information is transmitted during the download process.

6. Voice Recognition

The App includes a voice dictation feature that uses your Android device's built-in speech recognition service (via the Android SpeechRecognizer API). This is a system-level service provided by Android, not by Moonlight AI. The behavior of this service, including whether audio is processed on-device or via Google's servers, depends on your device, Android version, and Google account configuration. Moonlight AI does not control or have access to how the Android speech service processes audio.

Voice input is optional. You may use text input exclusively if you prefer.

7. Camera and OCR

When you use the camera capture feature, images are processed on your device using Google ML Kit's Text Recognition (for OCR) or a locally installed multimodal AI model (for visual analysis). Images are not transmitted to any external server by Moonlight AI. Google ML Kit may require Google Play Services on your device. Please refer to Google's privacy documentation for information about ML Kit's on-device processing.

8. Authentication and Biometrics

Moonlight AI does not have user accounts, login, or cloud-based authentication. There is no sign-in process.

The App optionally supports biometric app lock (fingerprint or face unlock) using Android's Biometric API. If Biometric Security is enabled (in development), data is handled by Android and is never transmitted to or processed by Moonlight AI.

9. Third-Party Services

The following third-party services are used by the App:

  • Hugging Face (huggingface.co): Used for AI model downloads. Subject to Hugging Face's Privacy Policy.
  • Google ML Kit: Used for on-device OCR. Requires Google Play Services. Subject to Google's Privacy Policy for on-device ML processing.
  • Android Speech Recognition (SpeechRecognizer API): Used for voice dictation. This is an Android system service. Subject to Google's Privacy Policy where applicable.

No advertising networks, social media SDKs, or data broker services are integrated into the App.

10. Permissions

The App requests the following Android permissions, used only for the stated purposes:

  • RECORD_AUDIO: Voice dictation in the chat interface
  • INTERNET: Downloading AI models
  • ACCESS_NETWORK_STATE: Checking connectivity before downloads
  • CAMERA: Capturing images for OCR or visual analysis
  • USE_BIOMETRIC / USE_FINGERPRINT: Optional app lock
  • WAKE_LOCK: Preventing device sleep during model loading
  • FOREGROUND_SERVICE: Maintaining downloads while the app is in the background
  • READ/WRITE_EXTERNAL_STORAGE: Legacy storage access on older Android versions

Microphone and camera permissions are requested at runtime when you first use those features and are not required for basic AI chat functionality.

11. Data Security

All user data is stored in the App's private storage directory on your device, which is protected by Android's application sandboxing. Sensitive preferences are stored using Android's KeyStore-backed secure storage. We do not operate any servers that store your personal data.

12. Data Retention and Deletion

Since all data is stored locally on your device, you control its retention. You can delete individual conversations, memories, or workspaces within the App. You can delete all App data by using Android's "Clear Storage" function in your device Settings, or by uninstalling the App.

For more information about clearing your data, see our Data Deletion page.

13. Children's Privacy

Moonlight AI is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. As the App does not collect any personal information from users, this policy applies equally to all users.

14. International Users

Because Moonlight AI does not collect or transmit personal data to servers operated by Moonlight AI, international data transfer considerations (such as GDPR cross-border transfers) are not applicable to the App's core functionality. Model downloads connect to Hugging Face servers, which may be subject to applicable data protection regulations.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when it was most recently revised. We encourage you to review this policy periodically.

16. Contact

If you have questions about this Privacy Policy or Moonlight AI's data practices, please contact us at: privacy@moonlight-ai.pages.dev

Or visit our Support page for additional assistance.