Privacy Policy

Applies to version 0.1.0 and later. Last updated: October 28, 2026.

In short: Wendelin does not collect anything. It has no account, no analytics, no telemetry and no backend of its own, and the developers receive no information about you. Audio stays on your phone. The app only connects to the services you set up yourself, and this page lists every one of them.

No data collection

Wendelin has no analytics, no telemetry, no crash reporting service, no advertising and no user accounts. The app does not check for updates and contacts no server of the developers.

What stays on your phone

Audio, the wake word, speech recognition and speech output (with the local engines). Audio does not leave the phone.
The conversation history, memory, the audit log and all settings.
All secrets (API keys and tokens) in the Android Keystore.
You can export and delete the audit log in Settings > Privacy and logs.

Every network connection

The app can make the following connections and no others. Each one happens only because you set up or switched on the feature, except the model download, which you start in the app.

Language-model provider

Your provider. Wendelin sends the transcript, the system prompt, selected memory entries and the tool descriptions and results to the provider you set up: Anthropic (api.anthropic.com), OpenAI (api.openai.com), OpenRouter (openrouter.ai), Mistral (api.mistral.ai), Phala/RedPill (api.redpill.ai), NEAR AI (cloud-api.near.ai), Tinfoil (inference.tinfoil.sh), Ollama on your own computer (default localhost:11434) or an endpoint you enter. The provider’s privacy policy applies to what it receives. The API key is sent only to that provider.

Speech models

One-time download of the speech and wake-word models, verified by checksum, from huggingface.co (Whisper models of the sherpa-onnx project), from the release pages on github.com of the sherpa-onnx project (further speech recognition and voice models) and of this repository, and from the openWakeWord project’s release page on github.com (wake-word feature models). The request reveals your IP address to these hosts; no audio or personal data is sent.

Verification of confidential providers

Only for providers with confidential execution (Phala, NEAR AI, Tinfoil), before data is sent:

The provider’s own host (the attestation report, receipts and keys).
NVIDIA (nras.attestation.nvidia.com) for the GPU proof, on request.
Intel (api.trustedservices.intel.com and the certificate-revocation address named in the certificate) for the processor certificates.
AMD (kdsintf.amd.com) for the processor certificates of Tinfoil.
GitHub (api.github.com, github.com) to check Tinfoil’s release and its signed build proof.

Integrations (each only after you set it up)

Home Assistant: the address you enter (HTTP and WebSocket). Looking for a server announces and listens in your Wi-Fi (mDNS); that stays in the local network.
Spotify: api.spotify.com and accounts.spotify.com; the sign-in page opens in your browser.
Todoist: api.todoist.com.
Google Tasks: tasks.googleapis.com, oauth2.googleapis.com; the sign-in page opens in your browser.
Shopping lists: Bring! (api.getbring.com).
Weather: the service you choose, Open-Meteo (api.open-meteo.com, plus its marine and place-search services), Bright Sky (api.brightsky.dev) or MET Norway (api.met.no). It receives the coordinates or the place name you ask for.
Web search: Brave (api.search.brave.com), Tavily (api.tavily.com) or a SearXNG address you enter, with your own API key. It receives the search text.
Web pages: if the language model asks to read a public web page, Wendelin fetches that address (no private or local addresses).
Your own MCP servers and HTTP tools: the addresses you enter, including their sign-in if the server asks for one.

No connection of Wendelin itself

Navigation (Google Maps, Waze), calendar, contacts, calls, SMS, alarms, timers and notes (Obsidian) work through other apps on your phone, not through a connection of Wendelin. Opening a map or a store page hands the address to Android. Those apps have their own privacy policies.

This website

This website is hosted on GitHub Pages. It sets no cookies, uses no analytics and loads nothing from third parties. GitHub may log technical data such as your IP address when you visit it; see the GitHub Privacy Statement.

Contact

Questions about privacy? Please open an issue on GitHub.