The short version
- Automata keeps your workspaces, chats, pages, tasks and files on your own devices, encrypted with a key that stays on those devices.
- SentientWave runs no account system and no server that stores your content. We cannot read your messages and we do not have a copy of them.
- We do not sell data, show ads, or use analytics or tracking. The app contains no advertising or analytics code.
- Your content leaves your device only to reach the devices of people and bots you share a workspace with, and services you turn on yourself.
What stays on your device
Everything you create or receive (messages, pages, tasks, files, contacts in your workspaces, settings, and keys) is stored in an encrypted vault on your device. Removing the app removes the vault from that device. Copies on your other devices, and messages you sent to other people, stay on those devices until they are removed there.
What is sent over the network, and to whom
The people and devices in your workspaces. When you share a workspace, invite someone or send a message, the app sends it, encrypted, directly to the devices of that workspace's members. Each workspace decides who may join.
Connection helpers. To find and reach your other devices across networks, the app uses relay and address-lookup services: those run by n0 (the company behind the Iroh networking library) unless you choose No vendor servers in Settings › Privacy, and any relays you add yourself. They see your device's IP address and a random device identifier, but not the content of your messages, which is end-to-end encrypted. Nearby discovery over Bluetooth and local Wi-Fi works only between devices in range and shows only a device identifier.
App packages and models. The app may download optional components, such as on-device language and speech models, from SentientWave's package servers. These requests reveal your IP address and which package is being fetched, nothing else.
Services you choose to connect. If you add an AI provider (for example OpenAI, OpenRouter, ChatGPT or Typesafe), the messages a bot needs to answer are sent to that provider under its own privacy policy. If you turn on map tiles, the app asks OpenStreetMap's tile servers for the map area you view. If you publish to the AT Protocol (Bluesky's network), what you publish is public by design. None of these is on until you turn it on.
Location and sensors for agents. When you ask an agent about where you are or how you are moving, it can read your own device's location, steps, air pressure and battery level, and only that device. The first time, your device asks you for permission. The reading becomes part of the conversation, so it goes to the workspace members in that chat and, if the agent uses an AI provider, to that provider. To name the place, the device asks Apple's geocoding service (on iPhone, iPad and Mac), which receives the coordinates. This is on by default; you can turn it off at any time under Settings › Privacy › Location and sensors for agents, or deny the permission in your device settings.
Name lookups. When your network's own DNS cannot find a server you asked the app to reach, the app asks a public resolver (Cloudflare's 1.1.1.1, then Google's 8.8.8.8) over HTTPS. Only the server name is sent.
Permissions
Automata asks for the camera (scanning invitation codes and video calls), the microphone (calls), Bluetooth and local network (finding your nearby devices), notifications (alerts from your workspaces), location and motion (only when you ask an agent, and never after you turn off Location and sensors for agents), and Face ID if you turn it on. Each is used only for that purpose, only while you use the feature, and can be turned off in your device settings.
Notifications
Automata uses no Apple or Google push service. Alerts come directly from your workspace's devices to yours.
Children
Automata is not directed to children under 13 and we do not knowingly collect information from them. We collect no personal information from anyone, as described above.
Your choices and rights
Because SentientWave holds none of your data, there is nothing for us to export or delete on a server. You can export an encrypted backup, leave any workspace, remove members from workspaces you manage, report or block people, and delete everything by removing the app. If you have questions or want to exercise a right under GDPR, CCPA or similar laws, contact us.
Changes
If this policy changes, we will update this page and its effective date, and describe significant changes in the app's release notes.
Contact
SentientWave Inc. Email: privacy@sentientwave.com.