OpenWeights Privacy Policy
Last updated: October 8, 2026
About this policy
OpenWeights is an open-source app by Experimental Machines for running language models on your device. This policy explains local storage, online requests and your choices. OpenWeights does not require an OpenWeights account.
Data stored and processed on your device
Model inference runs on your device. The app stores downloaded or imported models, conversations, attachments, saved facts, settings, task plans, watches and their history, and usage measurements locally so its features can work. Local usage measurements include model-pass counts, generated-token counts and timing information. OpenWeights does not include an advertising or analytics reporting service, and these measurements are not automatically uploaded to Experimental Machines.
File tools access the folder you choose. Scripts and Canvas can work with content made available through those local features. The app does not automatically upload your selected folder or conversation history to Experimental Machines. Online tools can transmit request data as described below, including queries derived from a conversation.
Online features and information sent to other services
Model discovery and downloads connect directly to Hugging Face and its download hosts. Requests include model search terms, requested model and file addresses, and normal connection information such as your internet address and request headers. If you save an optional Hugging Face access credential, the app stores it in Apple's Keychain and sends it to Hugging Face for verification and authorized access. You do not need that credential for public models.
Web search sends short queries to enabled providers, including DuckDuckGo, Brave and Yahoo. Context7 can receive queries when documentation search is enabled. Picture and clip searches use DuckDuckGo and download preview images from public websites. Page fetching connects to the requested public website and any permitted redirect destinations. Opening a search result connects to its source website. A configured search proxy also receives the traffic routed through it. Queries can include information derived from your conversation, so consider what you share before using online features.
Web search and media search initially start enabled. Page fetching starts disabled. You can change these controls in Tools. Approved scheduled web watches may repeat requests while they remain active.
These services receive the information needed for the request and may retain connection or request records under their own privacy policies. Experimental Machines does not operate their servers or control their retention. Review the policies of the services you choose:
Other websites and your chosen proxy have their own practices. Disabling online tools stops their use by the app. Importing a model from your own files lets you use local inference without model discovery or downloads.
Retention, deletion and permission controls
Local app records remain on the device until removed through available app controls or when the app's data is removed. Delete saved conversations in the conversation list, saved facts in Saved facts, models in Models, and watches using Remove watch and history. Deleting a conversation or model does not reset the app's aggregate usage measurements. Remove folder access in Tools to stop file access. Turn off memory tools to stop those tool operations.
Remove a Hugging Face credential in Settings and a proxy credential with Remove proxy in Tools. Removing a credential from the app does not revoke it at the service. Revoke it separately with the provider if needed. Remove saved credentials before deleting the app, because deleting an app is not a reliable way to erase Keychain entries.
Files you export or save into a shared folder remain under your control outside the app. Delete those files separately. Device or cloud backups can retain copies according to your Apple settings. Deleting local app data does not delete third-party server records or existing backups. Use the provider's privacy controls or contact it for deletion requests concerning its records.
Support and privacy requests
If you email us, we receive your email address and the information you choose to include. We use that information to respond to your request. Please do not send access credentials or unnecessary private conversations and files. We retain support correspondence while needed to resolve the request, keep necessary support records or meet legal obligations. Email us to request access, correction or deletion of support information we hold, subject to applicable legal requirements.
Support email is handled through Google's mail service under its privacy policy.
Public project issues are visible to others and handled by GitHub under its privacy policy. Use email for private privacy requests.
This policy website
This page is hosted on GitHub Pages. GitHub processes website connection information under its privacy statement. This page has no advertising, analytics scripts or forms.
Changes and contact
We will update this page and its date when this policy changes. Questions and privacy requests can be sent to Experimental Machines at jdmntec@gmail.com.