Privacy

TextOS is local-first.

TextOS stores app data in Android app-private storage by default. Data leaves the device only when you intentionally use a network feature, share/export content, or run a command that contacts the network.

Data stored locally

TextOS may store chats, project files, imported files, runtime files, runtime state, logs, diagnostic output, and authentication/session files on your device.

AI processing

When you send a chat message or ask TextOS/Codex to work with project context, your prompt, relevant conversation context, selected files, tool output, terminal output, or logs may be sent to OpenAI/ChatGPT/Codex services through your signed-in account.

TextOS does not automatically upload arbitrary workspaces, runtime rootfs contents, logs, auth files, or imported files just because they exist on the device.

MVP network checks

TextOS does not use background licensing or revenue checks in this MVP. TextOS may send anonymous setup diagnostics to help identify whether setup starts, completes, or fails on a device. Setup diagnostics can be turned off in Settings. If update, licensing, revenue, or broader analytics checks are added later, the privacy policy and app disclosures will be updated first.

Local network features

WebDesk and SSH/SFTP are local-network or localhost access features. LAN access must be explicitly enabled by the user and may expose files or runtime state to another device on the same trusted network.

Diagnostics

Logs and profiler captures are local diagnostics, not telemetry. They may include file paths, command output snippets, errors, or account display information, so treat exported logs as potentially sensitive.

When enabled, anonymous setup diagnostics may send setup event names, timing, app version, Android version, manufacturer/model, primary ABI, broad storage bucket, stage name, success/failure, exit code or signal, and a short sanitized error category/message. TextOS setup diagnostics do not collect chat messages, prompts, terminal commands, file contents, filenames, project names, local paths, account emails, tokens, clipboard contents, precise location, contacts, photos, microphone data, or advertising ID. The random diagnostics install ID resets when the app is uninstalled, and setup diagnostics can be turned off in Settings.

Delete and reset

You can remove local TextOS data through app flows such as sign out, delete thread/workspace, runtime reset actions, Android clear storage, or uninstall. OpenAI-side account data and retention are governed by your OpenAI/ChatGPT/Codex account settings.

Contact

For privacy questions, use the support route at textos.chat/support.