M5Chat — Privacy Policy

Last updated: October 8, 2026

M5Chat is a local-first AI chat app for iPhone. This policy explains exactly what data leaves your device, who receives it, and when.

The short version

Your conversations, knowledge base, and settings are stored only on your iPhone.
When you send a message, the text of that conversation is sent directly to the AI endpoint you configure. Depending on the engine you pick, that endpoint is one of: an OpenAI-compatible remote API (OpenAI, Anthropic, Google Gemini, DashScope, Zhipu GLM, Moonshot, Doubao), a self-hosted Ollama or LM Studio instance on your own hardware or LAN, or — for on-device engines (llama.cpp, MLX, Apple Foundation Models) — nowhere at all. That is how any AI assistant works: the model must read your request to answer it.
Your API keys are stored in the iOS Keychain and are sent only to the provider you configured them for. The developer never receives them.
When a knowledge base is used, relevant document snippets are retrieved on-device and included in the prompt sent to the same endpoint. The raw knowledge base and vector index never leave the device.
When the agent performs a web search or reads a web page at your request, the query or request goes to that third-party service — the same request your browser would make.
Voice input, when used, is processed by the speech engine you select; on-device engines keep audio on the phone.

We have no servers. M5Chat has no analytics SDKs, no advertising, no crash reporting, no tracking, and no accounts. We (the developer) receive nothing.

Data disclosure summary (App Store label)

M5Chat discloses: Other User Content — not linked to identity — not used for tracking — App Functionality. This reflects that conversation text is transmitted to the AI endpoint you configure and retained by them beyond the duration of a single request. Nothing else is collected.

Permissions

M5Chat asks for permissions only when you use the matching feature:

Photo library: when you attach a photo to a message.
Microphone: when you use voice input.
File access: only documents you explicitly pick to import into the knowledge base.
Clipboard: read only when you paste.

Your control

Choose a fully on-device engine (llama.cpp / MLX / Apple Foundation Models) and nothing ever leaves your phone.
Switch engines, edit or delete any conversation at any time.
Export or delete your data from within the app.
Delete the app — everything goes with it. There is nothing on our side to delete, because there is nothing on our side.

Contact

Questions: support@m5chat.app