Last updated 30 October 2026.
Localoy is an app that runs AI agents on your computer, with an account at app.localoy.ai and a gateway at api.localoy.ai for Localoy’s cloud models and connections. This page says what each part keeps and why. “We” means Localoy, the people who make it.
The short version
- Your chats, files, agents, memory and schedules live on your computer, not on our servers.
- When an agent uses one of Localoy’s cloud models, the request passes through our gateway to the model provider. We count it for billing. We don’t store what you or the model wrote.
- Models that run on your computer never reach our servers.
- We don’t sell your data, and we don’t use it to train models.
What we keep
- Your account. Your email address, when you joined and when you were last seen. Signing in is by a code we email you, so there is no password to keep.
- Sign-in safety. Each code sent, wrong code and block, with a scrambled (hashed) form of the network address it came from, so we can limit abuse. We don’t keep the address itself.
- Your computers. For each computer signed in to your account: its name, its system (macOS, Windows or Linux), the app version and when it was last used. You can sign a computer out from the dashboard.
- Usage. For each call to a Localoy model: which model and provider, how many tokens went in and out, what it cost, when, and which of your computers made it. This is what your usage pages and bills are made from. It never includes the words of the chat.
- Credit. Credit added, used and refunded, and the credit requests you send.
- Organizations. Members, roles, teams, invites, limits and the models an organization allows, and a log of changes its admins make.
- Connections. When you connect an app (an MCP server such as Notion or Zoho), we keep its address and your key or sign-in for it, encrypted. They are opened only to make the calls your agents ask for, and you can remove them at any time.
- Downloads. Which file and version you downloaded while signed in.
What we don’t keep
We don’t store the text of your prompts or the models’ replies. The gateway briefly keeps a note of which provider served a chat’s last call and how many tokens it read from cache, so the next call can reuse that provider’s cache and cost you less. The note holds no chat text, and the gateway deletes it after a couple of hours.
Who else sees your data
- Model providers. A call to a Localoy cloud model is sent to the company that runs the model, directly or through OpenRouter. They receive what the agent sends and answer it, under their own privacy terms.
- Apps you connect. An app you connect receives the requests your agents make to it, under that app’s own terms.
- The services we run on. Fly.io hosts our servers and database, in the United States. Cloudflare serves our domain. Resend sends our sign-in emails. GitHub hosts the app’s downloads.
- When the law requires it. We share data with authorities only when we are legally required to.
This website
localoy.ai uses Google Analytics to count visits and see which pages people read, which sets cookies in your browser. The app demo, when opened on its own page, records a page view with PostHog. The app on your computer sends neither.
How long we keep it
We keep your account data while your account exists. Usage and credit records are kept as long as they are needed for billing and accounting. When you ask us to delete your account, we delete your account, computers, connections and keys, and keep only the records the law requires us to keep.
Your choices
You can sign out computers and remove connections from the dashboard. To see a copy of what we keep about you, correct it, or delete your account, email privacy@localoy.ai from the address on your account.
Children
Localoy isn’t meant for children under 16, and we don’t knowingly keep their data.
Changes
When this policy changes, we update it here and change the date at the top. If a change affects what we keep about you, we will tell you by email first.