Privacy Policy for Ensor.

01 Summary

Ensor is a productivity app that lets you chat with AI models using API keys that you provide. We do not operate an Ensor backend that receives your chats or API keys. Agent configuration, messages, memories, and attachments are stored on your iPhone. When you send a message, your device communicates directly with the AI provider you selected.

02 Who this policy applies to

This policy applies to people who download or use Ensor on iOS. The App is intended for users who are at least 13 years old (or the minimum age required in your country). We do not knowingly collect personal information from children.

03 Information we do not collect on our servers

We do not require you to create an Ensor account. We do not run a cloud service that stores your:

• API keys
• chat messages
• prompts, memories, or summaries
• photos, PDFs, or other attachments
• usage totals

We do not use third-party analytics, advertising, crash-reporting, or tracking SDKs in the App. We do not use your data for advertising or tracking across other companies’ apps or websites.

04 Information stored on your device

The App stores the following locally so it can function:

• Agent profiles (name, avatar, model, provider, generation settings, prompts)
• Conversations, including group chats you create
• Optional long-term memories and conversation summaries
• Image and PDF attachments you add to messages (in the App sandbox)
• Token usage totals reported by providers
• Universal system prompts and a flag that starter sample chats were imported
• API keys in the iOS Keychain, using a This-Device-Only accessibility setting so they are not synced in iCloud Keychain and are not included in encrypted backups in the ordinary case

You can delete an Agent, delete messages, or delete the App to remove local data. Deleting the App removes local App data; Keychain items may remain until overwritten or removed by the system or by deleting the corresponding Agent before removing the App.

05 Information sent to third-party AI providers (at your direction)

When you save an API key and send a message (or run a connection test), the App sends a request from your device to the provider you chose. Depending on your settings, a request may include:

• the text you typed
• selected conversation history and Agent system prompts
• enabled universal prompts
• memories or summaries you turned on
• image or PDF attachments you included
• your API key in the request’s authentication header
• technical request parameters (model id, temperature, and similar options)

If you enable web search on a supported Agent, that provider may perform a web search in order to answer you. Search is performed by the provider, not by an Ensor server.

Built-in provider destinations include:

• OpenAI
• OpenRouter
• Anthropic
• Google Gemini
• DeepSeek
• a custom OpenAI-compatible HTTPS endpoint that you enter

Those companies process data under their own terms and privacy policies. We do not control their retention, training, logging, or geographic processing. Review the policy of any provider you connect before sending personal or confidential information.

Connection tests are used only to verify that your key and endpoint work. They are not saved as chat history.

06 Photos, files, export, and import

The App uses the system photo picker and file importer so you can choose an avatar or attach images and PDFs. The App does not need full Photo Library access. Chosen files are copied into the App sandbox.

If you export Agent settings or chats, Ensor creates a JSON file that you can share through the system share sheet. Settings exports exclude API keys, chats, memories, and usage. Chat exports exclude attachments and credentials. If you import a JSON file, its contents are stored on device like other App data.

07 iCloud

The App may show iCloud Sync as “Coming Soon”. That feature is not active. This version does not sync your Ensor data through iCloud.

08 How we use information

We use information only to provide the App on your device:

• to save your Agents and conversations locally
• to send the requests you initiate to the provider you selected
• to show streaming replies, errors, and on-device usage totals

We do not sell personal information. We do not use App content for our own advertising or product personalization on a network we control, because we do not receive that content.

09 Legal bases (EEA/UK users)

If data-protection law requires a legal basis, our processing of any limited information we handle (for example, an email you send to contact@anshopals.co) is based on our legitimate interest in responding to you, or on your consent where you choose to contact us. Processing performed by an AI provider you configure is a transmission you initiate; that provider is an independent controller or processor as described in its terms.

10 Retention

On-device data remains until you delete it or delete the App. We do not retain your chats on our servers. If you email us, we keep correspondence only as long as needed to respond and for ordinary business records.

11 Security

API keys are stored in Keychain and are not written to the App’s SwiftData store. Network calls use HTTPS. Custom compatible endpoints must use https. No security measure is perfect. You are responsible for the keys you paste into the App and for what you send to third-party models.

12 International users

Requests you send go to the provider endpoints you configure, which may be located in other countries. We do not operate a global Ensor processing infrastructure for App content.

13 Your choices

You may:

• decline to enter an API key (the App’s chat features that call a model will not work)
• choose which provider and model to use
• disable web search on an Agent
• avoid attaching photos or PDFs
• export or delete local data
• contact us at contact@anshopals.co to ask questions about this policy

Because we do not hold your chats on our servers, we usually cannot retrieve, correct, or delete conversation content from a central database. Use the in-App delete controls or delete the App.

14 Changes

We may update this policy. The “Last updated” date will change, and the current version will be posted at https://www.anshopals.co/ensor. If changes are material, we will take additional steps as required by law.