Privacy Policy

1.Controller

The controller responsible for data processing within the meaning of the GDPR is:

2.Overview & Principle

OwnAI processes personal data only to the extent necessary. The actual AI features run offline on your device. On the server side, we process data exclusively for license management, purchase processing, website operation and — if enabled — the update check.

3.Visiting the Website

When you access www.ownai.info, technically necessary data transmitted by your browser is processed (server log files):

• IP address (possibly truncated/anonymized)
• date and time of access
• requested page / file, amount of data transferred
• referrer URL, browser type and operating system

The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

Local storage (no tracking)

The website only stores your theme preference (light/dark) in your browser’s localStorage. No tracking or marketing cookies are set. A cookie banner is displayed on first visit to inform users about local storage usage.

4.Hosting

The website is operated by a hosting provider:

The provider processes the above server log data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

5.Licensing & Activation

To activate and manage licenses, we operate a license server using Cloudflare Workers/D1. The following data is processed:

The HWID hash is a pseudonymous, non-reversible value; it does not allow us to identify your hardware. The legal basis is the performance of the usage contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing license abuse (Art. 6(1)(f) GDPR).

6.Trial Version

For the free 30-day trial, a pseudonymous device identifier (HWID hash) is stored on the license server together with the start and expiry time. This serves exclusively to anchor the trial period per device and to prevent repeated resets. Providing an email address is optional for this.

7.Payment Processing

Sales and payment processing are carried out via the service provider Lemon Squeezy (as Merchant of Record). The data required for the purchase (e.g. name, email, payment and billing data) is processed by the payment service provider on its own responsibility or as a processor.

The privacy policy of the payment service provider additionally applies: Lemon Squeezy Privacy Policy. The legal basis is contract performance (Art. 6(1)(b) GDPR).

8.Update Check

If enabled, the application checks at startup or on request whether a new version is available. This sends a request to our server, which, for technical reasons, processes your IP address and the transmitted app version. The legal basis is our legitimate interest in providing secure, up-to-date software (Art. 6(1)(f) GDPR). The update check can be disabled in the settings.

9.Local Processing in the App

Your inputs (chats, prompts), analyzed documents, vector databases (RAG), settings, files edited by the coding agent, and locally generated media (e.g. images, audio, video clips where created offline, and image-to-3D meshes) are stored and processed exclusively locally on your device. No transmission to us takes place. Sensitive local data (e.g. stored credentials) is stored in encrypted form.

If you use image-to-3D or similar features with photos of people or other personal data, that processing remains local on your device; you are responsible for having a lawful basis for using those inputs.

You are responsible for this local processing yourself; it is not under our control.

10.Optional Online Features

Web search

If you use the optional web search, your search query is transmitted to a search service (DuckDuckGo). This feature is controllable by default and can be disabled. The privacy policy of the respective provider applies.

Model downloads

Language models and optional generative packs (including image-to-3D / TRELLIS weights) are downloaded at your initiative from third-party providers (Hugging Face). Data (e.g. IP address) is transmitted to the respective provider. Their privacy policy applies.

Optional cloud AI (e.g. OpenRouter)

If you enable optional cloud models (chat, image, video, music or similar), prompts and related inputs you choose to send are transmitted to the configured provider. You can disable cloud features and use local models only. The privacy policy of the respective provider applies. Where available, OwnAI may offer anonymization before cloud requests; enabling it is optional and under your control.

11.Third-Country Transfers

Some of the named service providers (e.g. Cloudflare, Lemon Squeezy) may also process data outside the EU/EEA — in particular in the USA. Where this is the case, the transfer is based on appropriate safeguards, such as EU standard contractual clauses or an applicable adequacy decision (e.g. the EU-US Data Privacy Framework).

12.Retention Period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods (e.g. under commercial and tax law). License and activation data is stored for the duration of the license relationship; server logs are deleted after 7 days.

13.Your Rights

Under the GDPR, you have in particular the following rights:

• access to the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLSD).

14.Contact

For questions about data protection or to exercise your rights, you can reach us at: