Harness Chat — Privacy Policy
Effective July 14, 2026 · Applies to the Harness Chat iOS app, desktop app, and harness-chat-web.vercel.app
Harness Chat is a bring-your-own-key AI chat client. We run no ads, sell no data, and collect nothing beyond what the features below need to work.
What we collect, how, and why
| Data | How it's collected | Why / where it lives |
|---|---|---|
| Email address | When you sign in with Google or Apple (optional — the app works signed-out) | Identifies your account. Stored in our database (Supabase). |
| Chats and titles | Created as you use the app while signed in | Syncing your conversations across your devices. Stored in Supabase. |
| Memory facts | Distilled from your chats when the memory feature is on | Letting the assistant remember context you've shared. Stored in Supabase; viewable and deletable in Settings. |
| Your OpenRouter API key | You paste it in Settings | Paying for your own AI usage. Stored in Supabase (signed-in) or only on your device (guest mode). |
| Voice recordings | Only while you hold the dictation button | Transcribed to text, then discarded. Never stored. |
Third-party AI services — what is sent, and to whom
When you send a message, the content you provide — your message text, any images or documents you attach, relevant conversation history, and saved memory facts — is transmitted to OpenRouter, Inc. (openrouter.ai, United States), which routes it to the AI model provider you selected for that chat (for example OpenAI, Anthropic, Google, xAI, DeepSeek, or Meta, depending on the model you chose). This happens under your own OpenRouter account and API key. The app discloses this and asks for your consent before your first message, and the active model is always shown in the chat toolbar.
OpenRouter's handling of this data is governed by the OpenRouter privacy policy; downstream model providers apply their API data policies, which do not use your content to train models by default. We never use your data for anything except serving your own chats back to you.
If you use web search, the search query the assistant forms is sent to DuckDuckGo. On-device models run entirely on your phone and send nothing anywhere.
What we never do
- No advertising, analytics SDKs, or trackers of any kind.
- We never sell your data, and we never share it beyond the AI routing described above.
- We never train models on your data.
- Guest mode sends messages directly from your device to OpenRouter — our servers never see them.
Exporting your data
Settings → "Export my data" downloads everything we hold for your account (all chats and memories) as a single JSON file, anytime.
Deleting your account and data
Delete your account any time, in the app: Settings → Delete account. This permanently and immediately removes your account record, email, all synced chats, all memory facts, and your stored OpenRouter key from our database. It cannot be undone. Deleting an individual chat removes it from our database as well.
Contact
Questions or requests: jaden.kwek@gmail.com