Onde for iPhone
Onde is a private assistant. It answers on the device, and it hands a bigger job to a cloud helper only when you say so. This page says exactly what that involves.
Last updated: 2026-10-30. The app is published by Splitfire AB. The Onde Inference privacy policy covers our website and accounts.
On the device
Onde runs a small open model on your iPhone. You download it once, about 1 GB, and it answers without a network connection.
What you type and what the model replies stay on the device. They are not sent to us, to analytics, or to anyone else.
There are no analytics, advertising or tracking SDKs in the app, and we do not build a profile of you.
Cloud helpers
Only the job you approve in the consent sheet is sent, over HTTPS, to the helper runner. Nothing else is.
Before a job leaves your phone, a consent sheet shows the exact payload: the task, any note you added and the constraints. Nothing is sent until you tap Send to helper.
On the device, a sanitiser replaces email addresses, phone numbers, card numbers, IBANs and API keys before the payload is built. The sheet tells you what it kept back.
Your Onde account sign-in token is sent with the request and handed to the helper for that single job. The helper runs in its own microVM, and the microVM is destroyed when the job ends.
Your account
Helpers need a Onde account. If you never sign in, Onde never contacts the cloud, and no account data is involved.
Your account email address, managed by your Onde account. That is the only data linked to you, and only once you sign in.
A helper job contains only the payload you approved. The conversation and the on-device model's history never leave the phone.
Questions
To ask about, correct or delete data linked to your account, write to privacy@ondeinference.com. For help with the app, see the support page.