RoboErgo Egg Privacy Policy

RoboErgo Egg (the “App”) is a local-first desktop AI companion. We keep as much data on your computer as possible.

Data storage

• Chats, memories (facts such as your name and preferences), and growth data are stored only on your machine (the app's data directory) and never uploaded to any server. Uninstalling the app or wiping its memory deletes them for good.
• Inner diary and dreams (the egg's own thoughts) are stored only on your machine; export and deletion are fully under your control via Soul Backup.
• Companion stats record only counts and active days — never any conversation content — and stay on your machine, deleted together with “make it forget everything”.
• API keys are stored in the macOS Keychain and never written to disk in plain text with your app data.
• Preferences such as window position are stored locally only.

Soul backup (export / import)

“Export soul” writes your memories, bond, diary, taught skills and companion stats into one JSON file in your Downloads folder. That file contains everything the egg knows about you — treat it like a diary. It leaves your computer only if you move it yourself.

Network communication

• Cloud-brain chat: only after you configure an LLM provider yourself (e.g. DeepSeek, Zhipu GLM) will your messages be sent directly to that provider and handled under its privacy policy. Without a key, the App runs fully offline and makes no network requests at all. Note: so the egg can “remember you”, the facts you taught it are sent along with each cloud conversation — clear its memory or disable the cloud brain if you prefer otherwise.
• Cloud thinking (can be turned off in settings): when enabled, the egg calls the cloud at a low frequency to think while awake and dream while asleep. Each call sends the same scope as cloud chat: persona, inner state (numeric levels), your name, a digest of memories, recent messages, and activity category with duration. It never sends app names, window titles, screen content or keystrokes.
• Voice input: after you tap the mic, audio is used only to call the transcription service you configured (Zhipu by default) to generate text in real time. Recordings are never stored locally and are discarded right after transcription.
• App awareness (can be turned off in settings): the egg can sense what you're doing to adjust its company. It reads only the name of the frontmost application (a public macOS NSWorkspace API, no special permissions required) and normalizes it locally into activity categories (e.g. “coding”, “watching video”) with accumulated time. Window titles, screen content and keyboard input are never read. Categories and durations stay on your machine; what gets sent to the cloud brain is category and duration only, never app names.
• The App itself contains no telemetry, no analytics and no ad SDKs.

Crash logs

When the App exits unexpectedly it leaves crash files in a local log directory. They leave your computer only if you export and send them to the developer yourself.

Contact

Questions about this policy? Reach us through the project repository's Issues.

Back to home