Oktapod privacy
Effective 4 October 2026 · Developer: Edi Hasaj
Oktapod is a client for an agent you choose. It does not create an Oktapod account or host your agent. Read the full policy for Android or iPhone and iPad.
Conversations and saved access
Messages, requests, and the photos, videos, files, or audio clips you choose go to your agent when you press Send. The system pickers grant access only to items you choose, and a photo taken with Camera reaches the app only if you keep it. Dictation turns speech into text in the message box through your phone's speech recognizer; the app does not record, store, or send the audio itself. See the iOS and Android pages for details. Your agent's operator controls its model providers, connected services, storage, and retention. The app developer does not automatically receive your conversations. Android stores connection credentials in encrypted device storage; iOS uses the device-only Keychain. Forget this agent removes saved access on the phone. It does not delete conversations on the agent.
System notifications
If you allow notifications, the app sends a device push token to your chosen agent. Google Firebase Cloud Messaging handles Android delivery, and Apple Push Notification service handles iOS delivery. Alerts use bounded previews of agent replies. You can turn notifications off in your phone's settings. Disconnect and Forget ask a reachable agent to remove its token.
If your agent does not hold its own notification keys, it asks the Oktapod push service at push.oktapod.ai to deliver the alert. The service receives the device token, notification kind, and a bounded preview for replies. It processes the preview for delivery without storing or logging its text. It keeps only short-lived rate-limit counters derived from a one-way hash of the token. Your phone's settings control lock-screen previews.
Optional data sent to the developer
On Android, crash reports and installation counts are separate switches that start off. A crash report includes the app release and a bounded error type, not conversation text or access credentials. An installation count includes a random installation ID, version, platform, and active day. You may also send an issue report; including a selected assistant reply requires an explicit choice. The iOS app does not send installation counts or automatic crash reports. Neither app has advertising or in-app payments.
This website
oktapod.ai and docs.oktapod.ai use no cookies. They count visits with the developer's own cookie-free analytics at insights.applifyer.com: the page, the referring site, the browser and device type, the approximate location, and how quickly the page loaded. Page addresses are recorded without query strings or fragments, apart from standard campaign labels. The analytics keep no network address and count nothing if your browser sends Do Not Track. The sites and the analytics run on servers the developer operates on Microsoft Azure in Germany. The web server keeps standard request logs, including network addresses, for 14 days to run and protect the sites.
Questions and deletion
For developer-held reports, contact support@oktapod.ai. For agent-held data, contact that agent's operator. Android deletion steps are on the data deletion page.