# Privacy Policy for ShellMind
**Effective Date:** 8 April 2026
Welcome to **ShellMind** (the "App"). We are committed to protecting your privacy and ensuring a secure experience. This Privacy Policy explains how we collect, use, and handle your information when you use ShellMind.
By using the App, you agree to the collection and use of information in accordance with this policy.
---
## 1. Core Functionality & Data Handling
ShellMind is a local-first Artificial Intelligence (AI) agent that integrates with device storage and the Termux environment to provide coding and automation assistance.
### Local Processing First
- **No Background Data Harvesting:** We do not silently harvest or upload your personal data, files, or terminal session logs to our servers.
- **Local AI Inference:** If you use local models (e.g., GGUF via SmolLM/Llama), all processing happens directly on your device. Your prompts and files never leave your phone.
### External API Usage (Cloud AI Models)
If you choose to use cloud-based AI providers (e.g., Google Gemini, OpenAI, Anthropic, OpenRouter) by providing your own API keys:
- Only the specific text prompts, chat history, and files you explicitly attach or allow the AI to read are sent to these third-party providers for processing.
- The App acts as a direct bridge between your device and the provider. We do not intercept, store, or monitor these communications.
- Your use of these services is governed by the respective Privacy Policies of those providers.
---
## 2. Information Collection and Use
For the App to function properly, we require specific permissions, which strictly adhere to Google Play's core functionality requirements.
### Device Storage & Files
- **Why we need it:** The App requires access to device storage to read project files, write code, and manage workspaces (via Android's Storage Access Framework or Termux configurations).
- **How it is used:** File access is only initiated during active chat sessions when you explicitly request the AI to read, edit, or create files.
- **Data Sharing:** We do not automatically upload or share your files. They are only sent off-device if you actively use a cloud AI provider to process them.
### Termux Integration (Run Command)
- **Why we need it:** To execute shell scripts and terminal commands directly via the Termux environment.
- **How it is used:** The App communicates with Termux explicitly based on user-approved commands. No background terminal commands are executed without your permission.
### Web Search Integration
- If you use the web search feature (via DuckDuckGo, Tavily, etc.), your search queries are sent to those search engines. We do not store your search history.
---
## 3. Advertising and Analytics (AdMob)
We use Google AdMob to display advertisements in the App.
- **Advertising ID:** AdMob may collect and use your device's Advertising ID and relevant metrics to serve personalized or tailored ads.
- **Google Policy:** This data collection is strictly handled by the Google Mobile Ads SDK in compliance with Google Play Developer Policies.
- You can opt-out of personalized advertising and reset your Advertising ID via your Android device settings.
- For more information, please review [Google's Privacy & Terms](https://policies.google.com/technologies/ads).
---
## 4. Security
We value your trust in providing us your information. We utilize commercially acceptable means of protecting it:
- **API Keys:** Any API keys (OpenAI, Gemini, etc.) you enter are stored locally on your device using encrypted/secure shared preferences. They are never sent to any server other than the intended official provider API endpoint.
- **Manual Command Approval:** The App requires manual user confirmation for executing potentially destructive terminal commands, ensuring you are always in control.
---
## 5. Children's Privacy
These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.
---
## 6. Play Store Data Safety Declaration
To comply with the Google Play Store Data Safety section, please note:
- **Data Collected:** Advertising ID (managed by AdMob).
- **Data Shared:** Text prompts and file contents (sent *only* to the AI provider APIs you configure, and *only* when you initiate a request).
- **Security:** API Keys are stored locally and securely.
---
## 7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted.
---
## 8. Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at:
thegsmwork@gmail.com