CommonerApps
CommonerApps
Offgrid runs entirely on your phone. Nothing you type leaves the device.
Offgrid does not collect anything. There is no account, no analytics, no crash reporting, and no server of ours for data to be sent to. Every reply is generated by your own phone's processor and stored only on that phone.
The one time anything leaves your device is when you deliberately go looking for a model: searching or downloading talks to Hugging Face, because that is where the models are. Nothing you type at a model ever does.
You can verify this yourself: turn on airplane mode. Everything except searching for and downloading a model continues to work exactly as before.
All of the following lives in Offgrid's private storage on your device. None of it is transmitted anywhere.
| What | Where it lives |
|---|---|
| Conversations and messages | A local SQLite database in the app's private data directory |
| Settings, including your system prompt | Local preferences in the app's private data directory |
| Downloaded model files | The app's own external files directory |
Uninstalling Offgrid deletes all of it. There is no backup and no sync, so there is nothing to restore from and nothing held by us.
Offgrid holds the INTERNET permission for two things, both of which you start yourself: finding models, and downloading them.
Searching Hugging Face sends the text you type to huggingface.co, along with your IP address, exactly as a web search would. It happens only while the search screen is open and only once you have typed something, and expanding a result sends a second request for that repository's file list. No account, no token and no identifier of you is attached, and Offgrid keeps no history of what you searched for. Hugging Face's privacy policy governs what they do with the request rather than this one.
Downloading from the built-in list or from search sends a request to huggingface.co. As with visiting any website, that request reveals your IP address and the file you asked for to Hugging Face and its CDN, and their privacy policy governs it rather than this one. Offgrid attaches no identifier of you to that request.
Downloading from a URL you paste sends a request to whichever host you typed. The same applies.
Nothing else in the app opens a network connection. Generating text does not, and neither does anything you say to a model. Your conversations are never transmitted, including the ones you have after using the search screen.
Offgrid can serve the loaded model over HTTP to other software on your phone. It is off by default.
When enabled, it binds to 127.0.0.1, which is reachable only from the device itself. A separate, clearly labelled option also listens on your Wi-Fi network.
The Wi-Fi option has no authentication. While it is on, anything on the same network can send prompts to your model. Only enable it on networks you control.
The server never sends anything outward. It only answers requests made to it.
| Permission | Why |
|---|---|
| INTERNET | Searching Hugging Face when you open that screen, and downloading model files you choose |
| ACCESS_NETWORK_STATE | Checking whether a download can proceed |
| POST_NOTIFICATIONS | Showing download progress and local API server status |
| FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC | Keeping a large model download alive, and the API server responsive, while the app is in the background |
| WAKE_LOCK | Keeping the screen on while a reply is generating, so it does not appear to have hung |
There is no location, contacts, camera, microphone, broad storage or advertising-identifier access, because nothing the app does requires them.
Models are third-party files produced by their respective publishers. They run locally, and Offgrid does not modify or transmit them. What a model outputs is a property of that model rather than of this app. The built-in list contains only models published with their original safety training intact. Offgrid will run any GGUF file you point it at, including community tunes without that training, and search reaches the whole Hugging Face catalogue; choosing to load one of those is yours to make. Every reply has a report control if a model produces something you think we should know about.
Offgrid is not directed at children. It collects no data from anyone, including children.
Any change will appear on this page, and the date shown at the top will change with it.
Questions about this policy can go to elijah@commonerapps.com.
Let's discuss your project and see how I can help bring your app idea to life.