Prompy Privacy Policy

Last updated: 2026-05-30

Prompy is a prompt optimizer that runs entirely on your own device using your own AI provider API key. We designed it to collect nothing.

What Prompy stores

• Your API keys are stored device-only, never cloud-synced:
  • Browser extension → chrome.storage.local (this browser on this device only).
  • Desktop app → encrypted at rest via the OS keychain (Electron safeStorage) — stored as ciphertext, not plaintext.
• Non-secret preferences (provider, model, style, delay) use chrome.storage.sync so they roam across your Chrome. These contain no secrets.
• Usage stats (prompts improved, estimated tokens refined) are stored locally for your own display and never leave your device.

What Prompy sends, and to whom

• When you improve a prompt, the prompt text is sent directly from your browser/app to the AI provider you selected (Anthropic, OpenAI, Google, or Mistral), authenticated with your API key.
• The request goes straight to that provider's API. No Prompy-operated server is involved, and we never receive, log, or store your prompts.
• Your prompts are subject to the privacy policy of whichever provider you choose.
• Local models (Ollama / LM Studio): with the Local provider, prompts go only to a model server on your own machine (e.g. http://localhost:11434) — nothing is sent to any third party.
• Conversation context: to fit suggestions to what you're working on, Prompy can include the surrounding conversation with the draft sent to your chosen AI provider. It goes only to that provider, never to us.
  • Extension (on by default): reads the visible conversation on the current page; disable it in the popup ("Use page conversation as context"). When off, only your draft is sent.
  • Desktop app (manual only): context is sent only when you paste it into the Playground or capture it from your clipboard (⌘⇧K / Ctrl+Shift+K). The desktop app never reads other apps' windows.

What Prompy does NOT do

• No analytics, telemetry, tracking, or advertising.
• No accounts, sign-in, or cloud sync operated by us.
• No selling or sharing of data — there is no data to sell or share.
• No collection of browsing history or personal information. Page content is used only as conversation context (see above), only while enabled, and only sent to your chosen AI provider.

Permissions (browser extension)

• storage — save your settings (keys device-only) locally.
• activeTab + host access to supported AI sites — show the suggestion overlay where you type.
• host access to the four AI API domains — send your prompt to your chosen provider.

If your prompts contain regulated or sensitive data

Prompy itself never sees your prompts — but the AI provider you choose does. If your drafts include health information (PHI), financial records, customer PII, legally privileged material, or anything else covered by regulations like HIPAA, GDPR, PCI-DSS, or your employer's data policies, treat the choice of provider as a compliance decision.

• HIPAA-covered work: do not send PHI to a cloud provider unless you have a Business Associate Agreement (BAA) in place with them. Anthropic, OpenAI, and Google offer BAAs on certain enterprise plans — check your specific account. Prompy is not a Business Associate and cannot be one (we hold none of your data).
• GDPR / regulated personal data: the provider becomes the data processor on the request. Their data-processing terms apply; review them.
• Safest option for sensitive material: select the Local provider in Prompy and run a local model via Ollama or LM Studio. Nothing leaves your machine — no cloud provider involved.

Contact

Prompy is built by Arhaan Khan. Questions or issues — reach out at arhaankhan7b@gmail.com or prompy922@gmail.com.