Your intelligence stays yours.
This is the honest, tier-by-tier account of what e0 does with your data — written to be true, not reassuring. On your device, nothing leaves. When you reach beyond it, we tell you exactly what travels, and where. There is no account, no analytics, no ad profile, and nothing to sell.
Last updated: 21 July 2026 · e0 mobile & desktop, and this site.
We can't sell what we never hold. Your words, files, and voice are yours — private on your device by design, and sent onward only when you choose to reach a machine beyond it.
Everything below is just the detail of that one principle.
Where your words go
It depends entirely on which model you choose.
e0 is not one place. It runs open models across several routes, and your privacy is a direct consequence of the one you pick for a given message. Three keep your words on hardware you or e0 control; two are cloud tiers that run off your device — and the app always shows which is which.
01 — on your device
Fully offline
Run a model directly on your phone. Your prompt, the reply, your files and voice are processed on the device and never transmitted. Airplane mode and it still works.
Nothing leaves02 — your mesh
Your own machines
Reach larger models on your own Macs and servers over your network. Content leaves the phone, but only to hardware you own and operate. It never reaches us.
Stays on your machines03 — e0 Fleet
e0's own machines
The comped Founder's Gift tiers run on e0's own internal machines, operated by Aeterna Systems — first-party infrastructure, never a third-party provider. Your prompt reaches our own servers to be answered, and is not sold, shared, or used to train anything.
e0's own machines · internal04 — e0 Cloud · off-device
Runs off your device
A cloud tier. Choosing an e0 Cloud model (e.g. prelude) runs it off your device, reached through the e0 fleet. Some tiers in this range currently route to a third-party model provider to generate the reply — so your prompt can pass through a company outside your control. We are moving these toward e0's own sovereign cloud over time; either way, your words leave your device, so the app marks them as cloud.
Off-device · may reach a third party05 — your own keys
Your provider, directly
Also a cloud tier. If you add your own Anthropic or OpenAI key, those messages go directly from your device to that provider, under your own account and their privacy terms. e0 is not in the middle — but your content does leave, for a third party you chose.
Leaves to your providerThe two cloud tiers (04 & 05) are the routes where your words go off your device — and, for some of them today, through a company outside e0. They are never the default and never assumed: the model pill in the app always shows which route is answering, and cloud tiers are marked plainly before you use them. Our direction is a sovereign e0 cloud, so even off-device stays within e0.
What we hold
Almost nothing — and never your content.
What we never collect
- Your chats, files, images, code, or notes
- Your voice recordings or cloned voices
- An account, email, name, or login — there is none
- Location, contacts, or advertising identifiers
- Third-party analytics or trackers — the app ships with none
- Payment or card details — the beta is comped, with no in-app purchase
The little we do handle
- A pseudonymous token. When you use a cloud or fleet tier, a random identifier (no name, no email) is sent with each request to the e0 fleet so it can meter free usage. It isn't linked to your identity and never touches on-device use.
- Optional diagnostics. A small, non-content device summary can help us fix bugs. It is off by default and only sent if you turn it on in Settings.
- Crash logs, on your terms. If the app crashes, the error (message, stack, app version — never your content) is stored locally and shown to you next launch. It is sent to a human only if you choose to tap send.
On your device
Your data lives with you.
Your conversations, downloaded models, settings, and any keys you add are stored locally on your device, under your control. There is no e0 cloud copy and no cross-device sync of your content unless you explicitly pair your own machines into a mesh — in which case it stays among your machines. Uninstalling the app removes this local data.
Permissions we ask for, and why
- Microphone
- Only for voice input, when you start a voice message. On-device speech-to-text keeps it local; audio isn't recorded or kept.
- Local network
- To discover and reach the machines you pair into your own mesh over Wi-Fi. Used to find your hardware, not to scan your network.
- Device storage
- To save downloaded models, your local chat history, and any files you attach — all held on your device.
- Notifications
- Optional — to let you know when a long task or a paired machine has something for you. You can decline them.
- Network access
- To reach your mesh, and — only when you choose a cloud or fleet model — the e0 fleet. On-device models use no network.
Who else is involved
Only when a route requires it.
e0 talks to as few outside services as possible, and only for the route you chose. When content is relayed to a model provider on your behalf, it is used to generate your reply. We do not control, and are not responsible for, the independent practices of the providers below — review their policies for their handling.
- e0 fleet (Aeterna Systems)
- Our own routing infrastructure. Receives your prompt only when you use a cloud or fleet tier, relays it to a model provider, and returns the answer. It carries the pseudonymous usage token described above.
- Model providers
- Some e0 Cloud tiers are currently served by third-party model providers that the e0 fleet relays to server-side; your prompt and reply pass through them to be answered. We are moving these toward e0's own sovereign cloud.
- Your chosen provider (BYO keys)
- If you add your own key, your messages go directly to Anthropic or OpenAI under your own account and their terms.
- Web search
- When you run a search, the query is sent through the e0 fleet to a search backend to fetch results. Don't search for anything you wouldn't put into a search engine.
Your rights & control
You are already the owner.
Because your content lives on your device and there is no account, most data rights you'd exercise elsewhere are simply yours by default: your data is in your hands, you can delete any conversation, clear all data, or uninstall to remove everything local at any time. Turn optional diagnostics off (or leave them off) whenever you like.
Under laws such as the GDPR, the CCPA, and the Australian Privacy Act, you also have the right to access, correct, export, or delete any personal data a company holds about you, and to object to its processing. Given how little we hold, this is usually immediate — and where we can help, we will. To make a request, or to ask anything about this policy, contact us below.
Children
Not built for children.
e0 is not directed to children under 13 (or the minimum age of digital consent in your region), and we do not knowingly collect data from them. Since there is no account, we hold no way to identify a child's data — if you believe a child has shared personal information with us, contact us and we will help remove it.
Changes to this policy
If it changes, we'll say so plainly.
e0 is early and evolving, and this policy will grow with it — especially as billing moves beyond the comped beta. When something material changes, we'll update the date at the top and, for significant changes, note it in the app. The current version always lives at this URL.
Who we are
A person you can reach.
e0 is an initiative of Aeterna Systems. Privacy is not a compliance afterthought here — it is the reason the product exists.
Privacy contact: privacy@entityzero.org
Aeterna Systems · an Aeterna Systems initiative
We aim to respond to any privacy request within 30 days.