← Everplay-Tech

AiMANAC Privacy Policy

Effective: March 25, 2026 · Last Updated: March 25, 2026

Overview

AiMANAC is an AI management platform that you own and control. Your data stays on your devices and your self-hosted server. We do not operate servers on your behalf, collect telemetry, or access your data.

What We Collect

AiMANAC does not phone home. There is no analytics SDK, no crash reporting enabled by default, no usage tracking, no advertising identifiers, and no telemetry of any kind.

What You Store (On Your Own Infrastructure)

When you use AiMANAC, the following data is stored on your self-hosted backend server and device:

• Chat messages — Conversations with AI providers, stored in your PostgreSQL database
• API keys — Encrypted via IHP Capsule Protocol (AES-256-GCM) on your server, never on device
• Workspace configurations — Names, settings, workflow definitions
• Artifacts — AI-generated outputs saved to your library
• Usage metrics — Token counts and cost tracking, stored locally
• Authentication tokens — JWT tokens stored in iOS Keychain / Android Keystore

Third-Party Services

AiMANAC connects to AI providers only when you explicitly configure them by providing your own API keys. These providers include but are not limited to:

• Anthropic (Claude)
• OpenAI (GPT, o-series)
• Google (Gemini)
• DeepSeek
• Perplexity
• Local AI servers (Ollama, LM Studio, etc.)

When you send a message, your prompt is transmitted directly from your backend server to the AI provider you selected. AiMANAC does not proxy, intercept, store, or analyze this traffic beyond what is necessary to display the response to you.

Each provider has its own privacy policy. You are responsible for reviewing them before providing your API key.

Apple Sign In

AiMANAC supports optional Sign in with Apple for account creation. If you use this feature:

• Your Apple-provided user identifier is stored on your backend server
• Your email (if shared) is stored on your backend server
• Apple's relay email service is supported
• Sign-in is optional — the app functions fully without an account

Data Encryption

All API keys are encrypted using the IHP Capsule Protocol:

• HKDF-SHA256 key derivation (master, profile, and session keys)
• AES-256-GCM authenticated encryption
• Data flow classification (LOCAL/LAN/CLOUD) is cryptographically enforced — not just policy
• Configuration exports use ChaCha20-Poly1305 with PBKDF2 (600,000 iterations)

Your Rights

You have complete control over your data:

• Access — All data is on your server. Query your database directly.
• Export — Use the in-app config export feature (encrypted .qyn1 bundle) or access your PostgreSQL database.
• Deletion — Delete your account in Settings. This cascades to all associated data on your server. You can also delete your database entirely — it's yours.
• Portability — Your data is in standard PostgreSQL. Export it anytime in any format.

Children's Privacy

AiMANAC is not directed at children under 13. We do not knowingly collect personal information from children. Since we collect no information from anyone, this is inherently satisfied.

Data Retention

We retain nothing — we have no servers, no databases, no logs. Your self-hosted backend retains data according to your own configuration:

• Chat messages: retained until you delete them
• Audit logs: 90-day default retention (configurable)
• Usage metrics: retained until you delete them

No DRM, No License Validation

AiMANAC performs zero license checks, zero phone-home requests, and zero feature gating based on network calls to our servers. The app you purchase is fully functional offline on first launch.

Changes to This Policy

We will update this policy if our practices change. The "Last Updated" date at the top reflects the most recent revision. Since we collect no data, material changes are unlikely.

Contact