Kallisti ("the App") is a native iOS companion application that connects to a self-hosted Hermes Agent runtime. This Privacy Policy describes how your information is collected, used, and shared when you use the App.
The fundamental principle: Kallisti is designed so that your data stays on your own infrastructure. We do not operate cloud servers, we do not have access to your conversations, and we do not sell your data.
1. Information We Collect
1.1 Information You Provide
- Server Configuration. You provide the URL and authentication credentials for your self-hosted Hermes Agent relay. This information is stored locally on your device in the iOS Keychain.
- Conversation Content. Messages, images, and voice recordings you send through the App are transmitted directly to your self-hosted relay server. We do not have access to this content.
1.2 Information Collected Automatically
- Health Data. With your permission, the App may read health metrics (heart rate, steps, sleep data, workouts) from Apple HealthKit. This data is sent to your self-hosted relay server and is not transmitted to us.
- Location Data. With your permission, the App may access your device's location in the background. This data is sent to your self-hosted relay server and is not transmitted to us.
- Motion Data. With your permission, the App may read motion activity data (walking, running, driving, cycling) from CoreMotion. This data is sent to your self-hosted relay server and is not transmitted to us.
- Device Information. The App collects your APNs device token for push notification delivery. This token is stored on your relay server and used only to deliver push notifications from your Hermes Agent to your device.
2. How We Use Your Information
All data collected by the App is used exclusively to provide the functionality you request:
- To facilitate communication between your device and your self-hosted Hermes Agent
- To deliver push notifications from your agent to your device
- To provide health, location, and motion context to your agent (with your permission)
- To display widgets, Live Activities, and Control Center widgets
We do not use your data for advertising, training, profiling, or any purpose beyond the core functionality of the App.
3. Data Storage and Transmission
- On-Device Storage. All configuration and authentication data is stored in the iOS Keychain with device-scoped accessibility.
- In-Transit. Communication between the App and your relay server is encrypted using TLS/HTTPS.
- At-Rest. Data at rest on your relay server is your responsibility. We recommend standard security practices: encrypted volumes, regular backups, and access controls.
4. Third-Party Services
The App connects to the following third-party services only as directed by you:
- Apple Push Notification service (APNs). Used to deliver push notifications. Apple's privacy policy applies.
- OpenAI Realtime API. Used for voice mode functionality if you configure it. Your voice data is sent to OpenAI's servers. This is optional and requires your explicit configuration.
- Your Self-Hosted Relay. All primary communication goes through a relay server you control.
5. Data Retention
We do not retain any data on our servers because we do not operate servers for this App. Data retention on your relay server is controlled by you. You may delete all App data at any time by uninstalling the App or clearing the App's data from iOS Settings.
6. Your Rights and Choices
- Permissions. You may grant or revoke HealthKit, Location, Motion, Camera, and Microphone permissions at any time through iOS Settings.
- Data Deletion. Delete the App to remove all locally stored data. Clear your relay server's database to remove server-side data.
- Open Source. The App's source code is publicly available under the MIT license. You may audit, modify, and build the App yourself.
7. Children's Privacy
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted at this URL. Your continued use of the App after changes constitutes acceptance of the updated policy.
9. Contact
For questions about this Privacy Policy, please open an issue on the Kallisti GitHub repository.