Privacy Policy

Last updated: 2026-08-01

Overview

Caladan Pal is a desktop AI pet app for Windows and macOS. Our privacy approach is simple: collect as little as possible.

Caladan Pal has no user accounts, analytics, or telemetry. We do not operate a backend server that relays or processes conversations, so we cannot view or recover chats from a server. You choose and connect directly to a third-party model provider. In versions with Conversation Center, you may also explicitly choose to keep encrypted history only on your device.

What We Collect

We do not collect personal profiles, chat histories, usage statistics, behavioral data, or crash telemetry on Caladan Pal servers.

When the app checks for or downloads updates, it connects to an Aliyun OSS static CDN. Like any normal network request, the CDN may process basic connection information such as your IP address and request timestamp. Caladan Pal does not use the update system to create a personal profile.

How Your API Keys Are Stored

You bring your own LLM API keys. They remain only on your computer and are encrypted using your operating system’s secure storage through Electron safeStorage.

Your keys are never uploaded to us. We have no backend server that receives or stores them. You should still protect access to your computer and operating-system account, and revoke a key through its provider if you believe it may have been exposed.

Where Your Chats Go

When you send a message, it travels directly from your computer to the model provider you selected, without passing through a Caladan Pal conversation server. We do not relay, inspect, or log your prompts and model responses on our servers.

We cannot read or recover your chat history from a server. How messages are processed, retained, or used by a provider depends on that provider’s own practices.

On-Device Chat History & Exports

In versions that include Conversation Center, chat history is never written to disk silently. Only after you explicitly enable it are conversation titles and message content encrypted by the app and stored on this device. If you choose session-only chat, new chats stay in memory and cannot be recovered after the app exits.

You can stop saving in Settings. Older encrypted history then remains on this device for viewing, export, or deletion, but cannot be continued until saving is re-enabled. You may also stop saving and clear everything, which removes the app-managed chat database, encryption key, and related backups. System snapshots or external backups may still retain copies.

Markdown files exported from Conversation Center are readable plaintext and are no longer protected by on-device chat encryption. Save them only to a location you trust. Caladan Pal does not upload exports or log the full destination path you choose.

Personal Reminders & System Notifications

Personal reminder text, schedule, and status are stored in a separate encrypted store on this device and are not uploaded to Caladan Pal servers. Delivery requires the app to be running; at launch, overdue reminders are handled only within the documented recovery window.

System notifications hide reminder text by default and only say that a personal reminder needs attention. You may explicitly enable text previews in Settings. Operating-system notifications can be visible to people near your screen.

Desktop File Filing

You can drag files or folders located directly on the desktop onto the pet. The app moves them into a chosen filing folder on your desktop. This happens only on your computer; file names, contents, and the files themselves are not uploaded to Caladan Pal servers.

The destination folder is created on the desktop when needed. Name collisions receive a unique new name instead of overwriting an existing item, and up to 20 items are accepted at once. This is a move rather than a copy, so confirm that you want to change the local location of those items before using it.

WeChat Chat X0 Experiment

Introduced in 0.1.9, WeChat Chat X0 is an off-by-default experiment. It runs only after you read the notice, explicitly consent, and sign in; your computer and Caladan Pal must stay online. It currently supports passive replies to private text chats only—no groups, images, voice, files, proactive pushes, or tool actions.

When enabled, the experiment reads WeChat messages on your computer and sends the necessary text to your selected model provider under your configuration. Login and required runtime state remain on-device. Caladan Pal does not operate a cloud conversation relay for these messages. You must also follow WeChat and your model provider’s terms.

Third-Party Model Providers

Caladan Pal supports DeepSeek, Qwen by Alibaba Cloud, Kimi by Moonshot, Zhipu GLM, Doubao through Volcano Engine Ark, SiliconFlow, OpenAI, Google Gemini, and Anthropic Claude.

Information you send to a provider is governed by that provider’s privacy policy, terms, and retention rules. We recommend reviewing them before adding an API key or sharing sensitive information. Caladan Pal does not control how third parties process data.

Auto-Update

The app checks for and downloads updates from an Aliyun OSS static CDN. This creates a normal network request that may include an IP address, timestamp, and technical information needed to deliver the update.

Update requests do not include your API keys or conversations. No account is required, and update traffic is not used by Caladan Pal for analytics or behavioral tracking.

Children

Caladan Pal is not specifically designed for children, and we do not knowingly collect children’s personal information. Because messages go directly to the selected model provider, parents or guardians should confirm that use complies with that provider’s age requirements and privacy terms.

Changes

We may update this policy if the app’s features or data practices change. The current version will be published with the project or on the official website. Material changes will be explained clearly.

Contact

For questions about this policy or Caladan Pal’s privacy practices, contact us at [email protected].