Privacy and your data
What stays on your phone, what is sent and to whom, encryption, ads, analytics and deleting data.
Stays on your phone#
- Chats, memory, settings and files are stored on your device (a local database). Nothing is shared publicly unless you share a task link.
- API keys, saved logins, workspace secrets, Daytona keys and passwords are encrypted with keys kept in the Android Keystore. The agent only sees secret names; values are masked in tool output.
- Offline models run fully on the device.
Sent when you use a feature#
| Data | Goes to | When |
|---|---|---|
| Your messages and attachments | The AI provider you chose (CX AI backend or your own provider). | Every message. |
| Search queries / page fetches | Your search service and the websites read. | Web search and browsing. |
| Weather place | Open-Meteo (approximate location). | Weather answers, morning brief. |
| Orbit actions | That service, via Composio's gateway or directly. | When you use a connected orbit. |
| Cloud backup | Your account's cloud storage (Firebase). | If backup is on. |
| Shared task | cxagent.pages.dev share store. | When you tap Share task, until you delete it. |
| Reports | CX team. | Only the reply, your note, model and app version. |
| Support tickets | CX team. | Device info only if you tick Attach device info. |
| Crash/performance reports | Firebase Crashlytics/Performance. | Release builds, after accepting terms, with Crash and performance reports on. Never includes chats. |
Analytics and ads#
Advertising-ID collection is disabled and ad-ID permissions are removed. The CX team can show in-app announcements and offers (Offers channel).
Control#
- Turn memory off or pause it; delete memories; export memory as JSON.
- Clear browser cookies and site data; clear caches.
- Hide sensitive screens blocks screenshots on login/API-key screens.
- Erase data from this device or Delete account (see Sign in and your account).
Full details: cxagent.pages.dev/privacy, /terms, /ai-policy and /delete-account.