Last updated: August 1, 2026
Archis Browser ("Archis," "the app," "we," "us") is developed by Mihir Bhoi, an individual developer ("we," "our"). This Privacy Policy explains what information Archis collects, how it is used, where it is stored, and the choices you have. It applies to the Archis Browser app on Android (and, when released, iOS) and to this website.
If you have questions or want to exercise any of the rights described below, contact mihirbhoi.dev@gmail.com.
Archis works fully without an account. If you sign in to sync your data across devices, we collect, via the sign-in method you choose:
Google Sign-In: your email address, name, and profile photo, as shared by Google, plus a short-lived Google ID token used once to authenticate you with our backend (Firebase Authentication). We do not receive your Google password.
Sign in with Apple (where available): the name and email address you choose to share — Apple lets you hide your real email behind a private relay address, which we fully support.
Email/password sign-up: the email address and name you provide, and a password. Your password is sent directly to Firebase Authentication, which stores only a salted, irreversible hash of it. We never see or store your password in plain text.
If you're signed in, the following syncs across your devices through our Google Cloud project (Firebase Authentication + Cloud Firestore):
Bookmarks — URL, title, folder, and timestamps.
Browsing history — URL, page title, and visit timestamps. History is recorded per device and merged only for display; deleting an entry removes it everywhere.
Password vault metadata — see 1.3. We only ever store encrypted ciphertext for this category, never plaintext passwords.
A random installation ID generated on your device (not a hardware identifier), used only to tell your own devices' sync writes apart.
Your account ID (Firebase UID), used to scope all of the above to your account under server-side security rules that only your authenticated account can read or write.
Autofill profile data (1.4) is not included in cloud sync — it never leaves your device.
If you save a password in Archis:
It's encrypted on your device with AES-256-GCM under a random key that lives in your device's secure hardware storage (iOS Keychain / Android Keystore), never in the cloud.
For cross-device sync, that key is itself wrapped using a key derived from a separate vault passphrase you set — a passphrase we never transmit or store.
The vault screen is protected by Face ID / device biometrics, and passwords are only ever filled into a page when you explicitly tap to do so — never automatically.
We cannot read your saved passwords. Our servers only ever hold encrypted bytes.
Archis lets you save a profile (name, email, phone, date of birth, shipping and billing addresses, payment method / membership / employer names you choose to enter) to speed up filling out web forms — the same idea as autofill in Chrome or Safari.
This data is stored only in app-private local storage on your device. It is never uploaded to our servers, never synced through Firestore, and never sent to any third party.
Matching your saved profile to a web form's fields (e.g., recognizing "Given Name" means "First Name") is done by an on-device AI model (Apple's on-device model or a model downloaded to run locally) — your profile data does not leave your device for this feature, even if you have a cloud AI provider enabled elsewhere in the app.
Sensitive fields — passwords, card numbers, CVV/CVC, OTPs — are always excluded from autofill matching.
Archis includes an AI Mode. Two tiers never leave your device:
On-device processing (page summarization, Q&A, tab grouping, autofill matching) runs entirely on your phone, using Apple's on-device model or a model downloaded to run locally — nothing is sent anywhere.
If you choose to connect a cloud AI provider — OpenAI (ChatGPT), Google (Gemini), or Anthropic (Claude) — using your own API key:
Your API key is stored only in your device's secure hardware storage and is never sent to us.
Page content and prompts you submit for that feature are sent directly from your device to that provider, under your own account with them. That data is governed by the provider's own privacy policy, not ours — we do not operate the AI servers and this traffic never passes through or is stored by us.
Archis may request the following permissions, used only for the specific feature you invoke and not for tracking:
Microphone / speech recognition — for voice search. Audio is processed by the device/OS speech recognizer and is not stored by us.
Camera — for certain in-page web features (e.g., a website's own camera input, such as a video call or QR scanner), not used by us directly.
Location — only so that websites you visit can ask for it, the same way they can in Chrome or Safari: a maps site, a store locator, a "restaurants near me" search. Your device asks your permission first, and your answer goes straight to that website. Archis never reads, collects, stores, transmits or syncs your location, and no Archis feature uses it. Websites receive it only if you grant the prompt, and only over a secure (https) connection. You can revoke it at any time in your device's system settings for Archis.
Photo library — only if you choose a custom home-screen background.
Local notifications— for optional features like shopping price-drop alerts. These are scheduled and delivered entirely on your device; we do not use push notifications and no notification content is sent to a server.
For camera, microphone and location alike, Archis acts as the intermediary a browser has to be for the web to work: it holds the operating-system permission so that a page is able to ask you, and passes your answer through. These are accessed, not collected — nothing is retained by us. What a website does with what you grant it is governed by that website's own privacy policy, not this one.
Your answer is per website, not per app. Granting one site your location does not give any other site access to it. Archis asks separately the first time each site requests something and remembers only your yes/no answer for that site, on your device — you can review or reset these at any time in Settings → Site Permissions. Answers given in a Private tab are kept only in memory for that session, are never written to disk, and never carry over to or from normal browsing.
As of the date of this policy, Archis does not integrate any third-party analytics, advertising, or crash-reporting SDKs, does not display ads, does not use advertising identifiers, does not collect or store your location, and does not sell personal data.
We use the information above solely to:
Provide core features: browsing, sync, the password vault, and autofill.
Authenticate you and keep your synced data (bookmarks/history/vault metadata) scoped to your account.
Operate optional features you turn on, like price-drop alerts or a cloud AI provider connection.
Diagnose and fix problems when you contact us directly.
We do not use your data for advertising, and we do not build advertising profiles.
Cloud-synced data (bookmarks, history, vault ciphertext) is stored in Google Cloud Platform / Firebase (Cloud Firestore), access-controlled by server-side rules tied to your authenticated account ID.
Locally, structured data (autofill profile, price alerts, browsing settings) lives in an app-sandboxed on-device database; secrets (API keys, the vault encryption key) live in the device's hardware-backed secure storage (iOS Keychain / Android Keystore), never in plain files or general-purpose storage.
The password vault uses AES-256-GCM authenticated encryption end-to-end, as described in 1.3.
No method of transmission or storage is 100% secure, but we design each data category to minimize what could be exposed if any single layer were compromised — in particular, vault ciphertext and API keys are structured so that even we cannot read them.
We do not sell your personal data. We share data only with:
Google Firebase / Google Cloud Platform — our backend infrastructure provider, which hosts authentication and the Firestore database described above, acting as our data processor.
Google Sign-In / Sign in with Apple — used only to authenticate you, per 1.1.
AI providers you choose to connect (OpenAI, Google Gemini, Anthropic) — only if you enable them, and only the specific content of that request, per 1.5.
We do not share data with advertisers or data brokers, and we do not permit any third party to use your data for their own independent purposes beyond what's described above.
Synced data (bookmarks, history, vault metadata) is retained until you delete it in the app or delete your account.
Local-only data (autofill profile, saved API keys, price alerts) is retained on your device until you delete it in the app or uninstall Archis.
You can delete your account from inside the app: Settings → Account →Delete Account. You'll be asked to confirm your identity (your password, or a fresh Google sign-in) and to type DELETE. This immediately and permanently removes your sign-in credentials and everything synced under your account — bookmarks, browsing history, encrypted passwords and your vault passphrase record. It cannot be undone.
Deleting your account does not erase data held only on your device. Use Settings → Clear Browsing Data for that, or uninstall Archis.
If you can't reach the in-app option, email mihirbhoi.dev@gmail.com from the address associated with your account and we will delete it within 30 days and confirm by email.
Signing out (Settings → Account → Sign Out) stops sync but does not delete your cloud data — use the deletion option above for that.
Archis is not directed at children under 13 (or the minimum age required by your local law), and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to withdraw consent for optional features.
India (DPDP Act, 2023): you may request access to, correction of, or erasure of your personal data as a Data Principal, and may withdraw consent at any time by signing out and/or requesting deletion per 5.
EU/UK (GDPR) and US state privacy laws (e.g., CCPA): similar access, correction, deletion, and portability rights apply where applicable.
To exercise any of these rights, email mihirbhoi.dev@gmail.com.
Our backend (Google Cloud Platform / Firebase) may process and store data in data centers outside your country of residence. Google provides its own safeguards for cross-border transfers; see Google's privacy and data processing documentation for details.
We may update this policy as Archis's features change. Material changes will be reflected by updating the "Last updated" date above. Continued use of Archis after a change constitutes acceptance of the updated policy.
Questions, requests, or concerns about this policy or your data:
Mihir Bhoi
Email: mihirbhoi.dev@gmail.com