Connect for LM Studio privacy notice

The short version

• Pocket Grove does not run an AI service for this app and does not receive your prompts, chat history, custom instructions, photos, file contents, server address or access token.
• Chat data travels directly from your iPhone to the exact LM Studio-compatible server you chose.
• Before an authenticated connection or any chat data is sent, the app names the server operator and exact destination, lists the data involved and requires an explicit acknowledgement followed by Allow & Send. Not Now sends no credential or chat data.
• No account, analytics, advertising or tracking.
• App Review Demo Mode uses bundled sample data and contacts no AI service.

What stays on your iPhone

The app stores the following in its private local storage so its features work:

• Chat messages, generated replies, drafts, conversation titles and custom instructions.
• Photos and files you attach. Text may be extracted locally from a file for a chat.
• Server addresses, ports, connection settings, selected models and app preferences.
• Server access tokens you enter, held in the iOS Keychain.

This information is collected when you enter, select, attach or save it in the app. Pocket Grove has no copy of it and cannot read it.

Local network discovery and connection checks

If you choose automatic discovery, the app checks addresses on your current private Wi-Fi network for an LM Studio-compatible service on the standard port. Those checks contain no prompt, chat history, attachment, custom instruction, advertising identifier or analytics identifier. Results stay on your iPhone and are not reported to Pocket Grove.

Before an authenticated connection check or model-list request is made to a server you configure, the app shows the data-sharing permission screen. The request may reveal your device's network address to that server in the normal way any network connection does and, if you configured one, sends the access token solely to authenticate with that exact server.

Chat data sent to your selected AI server

When you choose to send a chat, the app makes a direct request to the exact server address shown in the permission screen. The recipient shown to you is the named server and the person or organisation operating that exact destination. In the intended self-hosted setup, that is you or your organisation. Pocket Grove and Element Labs do not receive the request merely because the app connects to LM Studio-compatible software.

Depending on the chat, the request may contain:

• Your current prompt and the relevant prior chat history needed for context.
• Custom instructions you added.
• Selected photos and text extracted from attached files.
• The selected model and reasoning settings.
• An access token, if you configured one, used only to authenticate to that server.

The server uses this data to authenticate the connection where needed, generate the reply you requested and stream it back to the app. It is not routed through Pocket Grove or Congle servers. We do not use it for advertising, profiling or model training because we never receive it.

Your permission before chat data is sent

Before the first authenticated request or chat transmission to each server, a non-dismissible screen identifies the server name and operator, displays the full server destination, lists every category of data that may be sent, explains its purposes, and explains who controls any further processing or retention. Allow & Send remains disabled until you affirmatively switch on the acknowledgement. Tapping Not Now sends no credential or chat data and leaves an unsent prompt in the composer as a local draft.

Permission applies to future connection and chat requests to that exact destination until you revoke it. Choosing a different destination asks again. A materially expanded disclosure also invalidates older saved permission so the app asks again. You can inspect the disclosure at any time under Settings → AI Data Sharing → Review Data Sharing Details, and revoke every saved permission under Settings → AI Data Sharing → Reset Data Sharing Permission.

LM Studio and whoever operates your server

LM Studio is made by Element Labs, Inc. Element Labs describes how its desktop software and optional cloud services protect and process data in the LM Studio Desktop App Privacy Policy.

When LM Studio runs on a computer or server you control, requests remain within that environment except for any model or service you separately configure there. Pocket Grove does not select, contract with or route chat data to a hosted AI provider. If you choose an address operated by somebody else, that operator becomes the recipient you selected and independently controls its processing, security, retention, deletion and any model-training use. The app identifies that destination and asks permission before sending, but Pocket Grove cannot audit or guarantee an arbitrary server address entered by a user. Do not grant permission unless that operator has committed to privacy and security protection equal to or stronger than this notice requires.

Third parties and equivalent protection

Pocket Grove does not disclose chat content to any developer-selected AI company. A server address entered by you is a user-directed recipient, not a Pocket Grove processor. Where Pocket Grove does appoint a service provider for app functionality, we require it to protect personal data to the same or an equivalent standard as this notice and applicable law, restrict processing to the stated purpose, apply appropriate security, and support deletion or consent-withdrawal obligations.

The only such app service described here is RevenueCat for purchase entitlement management. Apple processes App Store purchases under Apple's terms. Neither provider receives prompts, chat history, attachments, custom instructions, server addresses or server access tokens from Connect for LM Studio.

Purchases

Pro is sold through the Apple App Store. Apple handles payment; we never see your card details. RevenueCat receives an anonymous app-user identifier and purchase or subscription details so the app can offer, validate, restore and manage Pro access. RevenueCat does not receive chat content, attachments, custom instructions, server addresses or access tokens from this app. We require providers acting for us to provide the same or equivalent privacy and security protection described in this notice. RevenueCat's handling is described in the RevenueCat privacy policy.

Retention, deletion and security

Local chats and attachments remain on your iPhone until you delete them or remove the app. Access tokens remain in the iOS Keychain until you remove or replace the credential.

Retention by a selected server depends on its operator and configuration. Pocket Grove cannot access, correct or delete data on an independently operated server because the app sends it directly there. Contact that operator for those requests.

Use HTTPS for any server reached over the internet. Plain HTTP may be suitable on a trusted local network but does not encrypt traffic in transit.

Resetting permission prevents new authenticated and chat requests to that destination but cannot recall data already received by a server. Delete local conversations in the app or remove the app to remove their local copies. For data held by a server operated by somebody else, contact that operator directly because Pocket Grove never receives or controls it.

Your choices and rights

• Choose Not Now: no credential or chat data is sent to the displayed server.
• Reset permission: the app asks again before contacting that destination.
• Change or delete a host: stop using that address and remove its saved credential.
• Delete chats or the app: remove locally retained chat data and attachments.
• Contact us to exercise applicable privacy rights over data controlled by Pocket Grove. For data controlled by a selected server operator, contact that operator directly.

Contact

Privacy questions: [email protected]
General support: [email protected]