Privacy Policy

The Short Version

The OneStone desktop app runs on your machine and keeps your data there. The optional web dashboard at app.onestoneai.com stores what you put in it in your own private space on OneStone Cloud, which runs on Cloudflare. You can delete your dashboard account, and everything stored with it, at any time. This policy says exactly what goes where.

The Desktop App: What Stays on Your Machine

• Conversations — all chat history is stored in your local OneStone data directory.
• Memory and knowledge — rules, knowledge entries, and project context are local markdown files.
• Contacts, calendar and routines — stored locally; they leave your machine only if you link the desktop to the web dashboard and sync.
• Agent configuration — model preferences, routine definitions, identity files — all local.
• API keys and credentials — encrypted with your operating system's keyring (gnome-keyring or KWallet on Linux, DPAPI on Windows) and stored locally. On a Linux system with no keyring they are stored unencrypted, and the app's Connections page warns you. They are never synced.

The Desktop App: What Leaves Your Machine

When you chat with an AI model, your prompts and conversation context go to the provider you configured (Anthropic, OpenAI, Google Gemini, Groq, Mistral, OpenRouter, Ollama); with Ollama they stay on your machine. Each provider has its own privacy policy:

• Anthropic
• OpenAI
• Groq
• Mistral
• Google
• OpenRouter

Only when you use them: email goes through AgentMail; phone pairing passes messages through our relay server in transit, without storing them; web searches go to DuckDuckGo and page reads to the page's own site, identified as OneStone (with its version); update checks contact the OneStone releases repository on GitHub; a service you connect (GitHub, Cloudflare, Porkbun, an external MCP server) is contacted when you or the agent use it. The desktop app sends no telemetry.

The Web Dashboard (app.onestoneai.com)

• Signing in — with GitHub or a passkey. From GitHub we store your name, email address and profile picture, your GitHub account ID and the sign-in tokens GitHub issues. For a passkey we store only its public key and identifiers; the private key never leaves your device.
• Sessions — a secure, HttpOnly cookie that lasts 7 days. A session record notes the IP address and browser it was created from.
• Your data — conversations, knowledge, projects, calendar, contacts, routines and settings, kept in your own private storage space that no other account can reach. API keys and other credentials you save are encrypted (AES-256-GCM) before they are stored. Email is fetched from AgentMail when you open it, not copied.
• AI — your chats go to the provider you choose, with your own key, directly or through Cloudflare AI Gateway. The free tier runs on Cloudflare Workers AI.
• Sync — only if you link your desktop app. It syncs projects, knowledge, calendar, contacts, routines, your agent identity and your profile; conversations and credentials are not synced.
• Request logs — each request is logged (method, path, status and timing, not its content) to run the service.
• No analytics or trackers run in the dashboard.

Deleting Your Data

In the web dashboard, open the account menu and choose Delete account. It permanently deletes your account, your sign-in methods and sessions, and everything stored in your space, at once. For your security it needs a recent sign-in (within 24 hours). Cloudflare's point-in-time recovery keeps earlier states of the storage for up to 30 days, after which the data is gone for good. Items you delete yourself go to the trash first and are purged after 7 days (you can change that in Settings). Desktop data is on your machine: delete it there.

This Website

The onestoneai.com website is a static site hosted on Cloudflare Pages. We use Cloudflare Web Analytics, which uses no cookies, does not track individual visitors and collects no personal data: it provides aggregate page view and visitor counts only. We use no advertising trackers, retargeting pixels or other third-party analytics.

The site's Ask OneStone chat sends your question to Google's Gemini API to answer. It runs on the API's free tier, so Google may use what you type to improve its products, and human reviewers may read it (Gemini API terms). Please don't type personal information into it.

Who Processes Data

• Cloudflare — hosts this website and the web dashboard, and stores dashboard data.
• GitHub — sign-in to the web dashboard, and the desktop app's update checks.
• The AI provider you choose — and Google (the Gemini API) for the website chat.
• AgentMail — email, if you use it.

Updates to This Policy

If this policy changes, the update date at the top of the page will reflect the change.

Contact

Questions about privacy? Email [email protected].