Russet: Privacy Policy
South Bay Compute built the Russet app as a Free app. This SERVICE is provided by South Bay Compute at no cost and is intended for use as is. To the fullest extent permitted by law, the developer disclaims all liability for any direct, indirect, incidental, consequential, or special damages arising from or related to your use of the app, including but not limited to, any errors or omissions in the content provided, any interruptions or malfunctions of the app's functionality, or any reliance on information displayed within the app. The app is provided “as is” and “as available.”
This page explains what information Russet collects, how it is collected, how it is used, and who it is shared with. It applies to Russet on iPhone, iPad, Mac, Android, and Linux. Where a feature exists only on some platforms, that is noted.
Summary
Russet is built to run AI on your device. Your chats, prompts, responses, attachments, projects, personas, and settings are stored on your device and are never uploaded to Russet's servers.
Russet sends a chat to a third-party AI service (OpenAI or OpenRouter) only if you add your own API key for that service, allow Russet to send chats to it, and choose one of its models for that chat. Chats with on-device models are never sent to these services.
An optional Russet account stores your email address and a short list of your signed-in devices. It does not store or sync your chats.
Russet collects usage analytics that never include your prompts or model responses. You can reduce analytics to a minimum in Settings.
Russet does not sell your personal information or use it for advertising.
On-device AI
Chats with Apple Intelligence, MLX models, GGUF models (Mac and Linux), and LiteRT models (Android) run entirely on your device. Their prompts, responses, and attachments are not sent to anyone, including the developer.
Downloading a model fetches it from Hugging Face. Like any download, this shares your IP address and the requested file with Hugging Face, but none of your chats.
Third-party AI services: OpenAI and OpenRouter
Russet can also chat with cloud models from OpenAI and OpenRouter. These are optional and off until you set them up.
When data is sent. Before any data is sent, Russet shows a permission screen that names the service, lists what will be sent, and links to the service's privacy policy. Nothing is sent unless you tap Allow. After that, a chat is sent only when you choose that service's model for it. Users who saved a key in an earlier version of Russet are asked before their next chat with that service.
What is sent. For each message in a chat that uses one of these services, Russet sends:
the messages you send and the earlier messages in that chat;
photos, files, and document text you attach, including project files you use in the chat;
your chat instructions: the persona, project instructions, and the name and details about you saved in Personalization, unless the chat turns personalization off;
on Mac and Linux, the names and descriptions of your skills, and a skill's instructions when it is used;
for OpenRouter, the web search location and timezone you set for server tools, when those tools are on.
Who receives it. Requests go directly from your device to the service, using your own API key, and never pass through Russet's servers. OpenAI stores responses so a chat can continue. OpenRouter passes each request to the company that serves the model you pick, such as Anthropic, Google, Meta, or Mistral. Each of these companies handles your data under its own privacy policy and your account settings with it.
Project file uploads. If you turn on uploading for a project file, Russet uploads that file to the service you chose so that its models can read it. Turning uploading off, removing the file, or deleting the project deletes the uploaded copy.
Your API keys are stored only in your device's protected credential storage, such as the Keychain on Apple devices. They are never sent to Russet's servers.
Changing your mind. You can stop sending chats to either service at any time in Settings > Chat Model. Removing a key also removes your permission, so you will be asked again if you add a key later.
Read the OpenAI privacy policy and the OpenRouter privacy policy.
Russet account (optional)
You can use Russet without an account. A free account unlocks extra features and uses passwordless sign-in with a one-time code sent to your email. If you create one, Russet stores:
your email address and an account ID;
for each signed-in device (up to three): its platform, a device name, and when it was registered and last seen. The device name is your Mac or Linux computer's name, your Android device's model, or “Apple mobile device” on iPhone and iPad.
Accounts are hosted by Supabase. Your sign-in session is kept in your device's protected credential storage. Creating an account requires you to be at least 18. Russet checks your date of birth on your device and does not save or send it.
Your account does not store, back up, or sync your chats, prompts, personas, settings, or files. Remote Control, which lets an iPhone or iPad continue a chat running on your Mac, connects your own devices directly over your local network; your account only provides a pairing key for that connection.
You can delete your account in the app. Deletion is completed within seven days, and your account data is then removed from Supabase.
Analytics
Russet uses PostHog to understand how the app is used and to fix problems. Analytics never include your prompts, model responses, attachments, contacts, calendar, health data, or API keys.
With Helpful Analytics (the default), analytics can include which features you use, model and provider names, timings, error types, your device model, operating system and app version, and answers to optional feedback questions, grouped by random identifiers. They can also include the titles and descriptions of your projects, and the names, descriptions, and instructions of skills you write in Russet's editor (Mac and Linux), but never skill text Russet didn't author or text that looks like a secret. If you are signed in, analytics are linked to your account ID and email address.
With Minimal Analytics, Russet sends only basic usage events, including your choices on the permission screen for OpenAI and OpenRouter. It drops detailed measurements, feedback answers, project and skill text, and the link to your email address. You can switch in Settings.
Russet does not include a crash-reporting SDK. If you choose to share crash reports with app developers in your device's settings, Apple or Google may provide them to the developer.
Device permissions
Russet asks before reading your calendar, contacts, health data, photos, camera, microphone, or location, and uses them only for the features you use them with. Calendar, contact, and health information is read on your device for on-device models and is not sent to OpenAI, OpenRouter, or the developer.
The weather and air-quality tools send your device's location coordinates to Open-Meteo to look up local conditions.
Other services Russet contacts
Open-Meteo, for weather and air quality, as described above.
Datamuse, when you use word-finding tools: the word you look up.
is.gd, when you shorten a link: the link you shorten.
MCP servers you connect (Mac only): when an on-device model calls a tool on a server you added, that server receives the request you approved.
The App Store, Google Play, Snapcraft, and rickytakkar.com, to check for app updates.
Tally, if you open a feedback form: whatever you choose to submit.
Data retention and deletion
Data on your device stays until you delete it or remove the app. Account data is kept until you delete your account. Data you sent to OpenAI or OpenRouter is kept under their policies, and you can manage it with each service. To ask about or delete analytics associated with you, contact the developer below.
Third parties and their protections
Russet shares data only with the services named in this policy, and only for the purposes described here. Each of these services is bound by its own privacy policy, and Russet uses them because they protect your data at least as well as this policy does: OpenAI, OpenRouter, Supabase, PostHog, Hugging Face, Open-Meteo, Apple, and Google.
Children
Russet is not directed to children. Creating an account requires you to be at least 18.
Links to Other Sites
This Service may contain links to other sites. Note that these external sites are not operated by me. Therefore, I strongly advise you to review the Privacy Policy of these websites. I have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Changes to This Privacy Policy
I may update this Privacy Policy from time to time. You are advised to review this page periodically for any changes.
This policy is effective as of 2026-10-07.
Contact Us
If you have any questions or suggestions about this Privacy Policy, do not hesitate to contact me at support@southbaycompute.com (please include “Russet” in the subject line).
This privacy policy page was created at privacypolicytemplate.net.