Privacy Policy

1. Overview and Core Architecture

Moonlight AI is a privacy-focused, local-first artificial intelligence assistant application for Android, developed and published by Moon Knight Studio.

Moonlight is local-first, not local-only. The application supports three distinct execution modes: Phone mode (on-device inference), Computer mode (connecting to your own LM Studio server), and Cloud mode (connecting to supported third-party cloud AI providers with your own API keys). Where your messages and prompts are processed depends directly on the execution mode you choose.

Moonlight does not require you to create a Moonlight account. We do not operate a centralized user database, account system, or cloud chat synchronization service. This policy explains what data is stored on your device, how network requests are handled in each mode, and what controls you have over your data.

2. At a Glance: Where Your Data Goes

• Phone Mode (On-Device Inference): Prompts, responses, conversation context, personal instructions, and attached text files are processed entirely by compatible GGUF language models running on your Android device. After required local models are downloaded, Phone mode can operate completely without an internet connection. No cloud AI provider is involved in Phone mode.
• Computer Mode (LM Studio): Requests are transmitted over your network to the LM Studio API endpoint that you configure. The AI runs on the designated computer rather than on your phone. Your server operator controls its logs, retention, and connected models.
• Cloud Mode (Third-Party Providers): Requests are transmitted to the cloud provider you select (such as OpenAI, Anthropic, Google Gemini, Alibaba Cloud, or NVIDIA) using your own API credentials. The selected provider processes the request, and their respective privacy, data handling, and retention policies apply.

3. Information Stored Locally on Your Phone

When you use Moonlight AI, the following data is stored locally in the application’s private Android sandboxed directory:

• Conversations: Chat messages, conversation titles, and timestamps stored in private local app storage.
• Memories & Personal Instructions: User-defined response preferences, personal instructions, and saved local memories.
• Downloaded AI Models: GGUF model files downloaded to your device’s internal app documents directory for use in Phone mode.
• App Preferences: Selected appearance theme, Reduce Motion preference, and configuration flags.

Android automatic cloud backup (Google Drive backup) is explicitly disabled for Moonlight AI to prevent automated transmission of local conversations. Local conversation storage uses private app sandboxing; it is not configured with an additional encryption layer over the database, so device-level security (passcode, biometric lock, full-disk encryption) is your primary defense against unauthorized physical access to your device.

4. Secure Credential Storage

API keys for third-party cloud providers and connection tokens for LM Studio servers are stored using a native encrypted credential store. Keys are encrypted using AES-GCM with cryptographic keys managed by the Android Keystore hardware-backed security enclave. Provider metadata (such as provider name or selected model identifier) is stored separately from the encrypted secret.

5. Computer and Cloud Mode Request Handling

When you initiate a chat in Computer or Cloud mode:

• The application displays a send disclosure indicating that the request will leave your device.
• The payload sent to the configured endpoint includes recent conversation messages (typically up to 20 recent messages for context), your saved personal instructions, the selected model name, and any currently attached text file content.
• Locally saved memories are not automatically injected into remote Computer or Cloud requests.
• Your stored API key is transmitted to the selected third-party provider to authenticate the request.

Third-party providers process requests on their own infrastructure, which may be located in other jurisdictions. Moonlight AI does not control and cannot guarantee third-party providers’ logging, retention, or training practices. We encourage you to review the privacy policies of any provider you connect to Moonlight.

6. LM Studio and Network Security

In Computer mode:

• Same Wi-Fi Network: Moonlight allows connection to reachable local private IPv4 addresses. An explicit opt-in is required for unencrypted HTTP connections on local networks. HTTP does not encrypt prompts or tokens in transit; if you require transport security, configure HTTPS or use a private VPN.
• Remote Connections: For connections outside your local network, Moonlight requires an authenticated HTTPS address, which should be used over a secure private network (such as Tailscale) configured on both your phone and computer.

7. Provider Web Search and External Links

Supported cloud models (for example, specific models from OpenAI or Anthropic) can utilize provider-hosted web search tools when enabled in provider settings:

• When web search tools are active, the provider may submit queries to its search services to retrieve relevant context. This query is generated by the provider and contains contextual information from your prompt.
• Clicking on web citations or external source links returned in AI responses will open those links in your default web browser, which communicates directly with third-party websites under standard HTTP/HTTPS protocols.

8. Model Downloads from Hugging Face

Downloading models for Phone mode connects to Hugging Face (huggingface.co) and its content delivery network over secure HTTPS. Hugging Face receives standard network request information (such as your device’s IP address and requested file path). No chat conversations, memories, or user prompts are ever sent to Hugging Face during model downloads.

9. In-App AI Response Reporting

Moonlight provides an in-app feature that allows users to report AI-generated responses that are incorrect, unsafe, or inappropriate:

• When you submit a report, the report payload includes the specific AI response being flagged, the user prompt that generated it, the selected model/provider identifier, and the user-selected issue category or feedback.
• Submitting a report does NOT transmit your entire unrelated conversation history.
• Reports are transmitted securely to enable investigation of quality and safety issues. Reporting is entirely optional and user-initiated.

10. Device Permissions

Moonlight AI requests minimal device permissions:

• Internet (`android.permission.INTERNET`): Required to download local models, communicate with your LM Studio server, and connect to cloud AI providers. Phone mode does not use network connectivity during inference once models are downloaded.
• Speech Recognition: Voice input uses Android's system `SpeechRecognizer`. Audio is captured through the system speech service; Moonlight AI receives only the transcribed text and does not record or store raw audio recordings.
• No Tracking Permissions: Moonlight does not request location, contacts, phone state, SMS, camera, or broad external storage permissions.

11. Analytics and Advertising

The Moonlight AI Android application contains:

• No advertising SDKs
• No analytics, tracking, or telemetry SDKs (no Firebase Analytics, Mixpanel, Segment, or similar tools)
• No third-party crash reporting SDKs (no Crashlytics, Sentry, or Bugsnag)

12. Data Retention and Deletion

Because Moonlight does not operate user accounts or central chat servers, managing your data is straightforward:

• Delete within App: You can delete individual conversations, clear saved memories, remove installed models, or delete saved provider connections directly from the app interface.
• Clear App Storage: In Android Settings → Apps → Moonlight AI → Storage, tapping "Clear Data" permanently removes all conversations, memories, credentials, and downloaded models from your device.
• Uninstalling: Uninstalling the application automatically deletes all locally stored sandboxed data.
• Third-Party Retention: For requests sent in Computer or Cloud mode, retention is governed by the LM Studio server operator or the respective cloud provider. You must use that provider's account portal to manage remote data retention.

For step-by-step instructions, visit our dedicated Data Deletion Guide.

13. Children's Privacy

Moonlight AI is intended for individuals aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us via support correspondence, please contact us immediately so we can remove it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the application or applicable laws. The "Last Updated" date at the top of this document indicates when revisions were made. Continued use of the application following updates indicates your acknowledgement of the revised policy.

15. Contact Us

If you have questions, concerns, or feedback regarding this Privacy Policy or your data, please contact:

Moon Knight Studio
Email: priyanshu09016@gmail.com
Support: Help & Support Centre