JARVIS

Privacy Policy

Desktop app (macOS and Windows) · Last updated: October 14, 2026

In short

No accounts, no ads, no analytics or tracking.
There is no developer server behind the app. The developer never sees, collects or stores your data.
Your conversations go directly to Google using your own Gemini API key.
What goes out for a few tasks such as weather, maps and updates is listed in section 3; everything else stays on your computer.

This policy covers the JARVIS desktop app (“the app”) on macOS and Windows, developed independently by Alp Ünlü. The policy for the ALPAI iPhone app is on a separate page.

1. What stays on your computer

The following is stored only on your computer and is never sent to the developer. The data folder is ~/Library/Application Support/JARVIS V4 on macOS and %APPDATA%\JARVIS V4 on Windows.

Your Gemini API key: in the macOS Keychain or the Windows Credential Manager. If those are unavailable, the key is written to the settings file as plain text, and Settings › GENEL (General) says so.
Settings: your chosen chip, the city you typed as your location, panel layout, language, sound preferences, your story mode progress, and also the assistant's latest unprompted remarks and the event and reminder titles it last mentioned, kept so it doesn't repeat itself.
Memory: things the assistant remembers: what you asked it to remember and what it noted on its own during conversations. WhatsApp contacts you saved (name and number) are kept here too; Settings › HAFIZA (Memory) shows phone numbers masked (last two digits only). On macOS, if you paired the iPhone app, memory (WhatsApp contacts included) is also shared with the phone and kept in sync both ways.
Notes and calendar: your notes; on Windows also calendar and reminders (JARVIS's own agenda, not linked to any account). On macOS, events and reminders the assistant adds are written to Apple's Calendar and Reminders apps; if those sync with your account, they go there too.
Log file: a written transcript of your conversations, what you typed (notes included), names of files you attached or it found, and short tool results. It exists so you can send it by hand when reporting a problem; the app never sends it anywhere. When it passes 2 MB, the previous copy is deleted. On Windows the same lines also go to %LOCALAPPDATA%\JARVIS V4\konsol.log, which is rewritten at every launch.
Diagnostics: pressing Settings › HAKKINDA (About) › TEŞHİS (Diagnostics) › KOPYALA (copy) copies to your clipboard the JARVIS version, operating system, names and types of your audio devices, microphone permission, the names of your installed antivirus and of Spotify, the model in use and recent audio and connection events from the log. Your conversations, file names, phone numbers and key are not included. The app never sends it anywhere; it only goes wherever you paste it.
Reporting an issue: Settings › HAKKINDA › SORUN BİLDİR (report an issue) opens a Google Form in your browser. The link carries your computer type and the JARVIS version; only the computer type (Windows or Mac) is filled in on the form. Everything else is what you write, and it reaches us through Google Forms when you press submit.
Files the assistant creates at your request: Documents › JARVIS Dosyaları (“JARVIS Files”), or the Desktop or Downloads if you ask. If these folders sync with OneDrive or iCloud Drive, the files go there too.
Images and files you paste or drag in from a browser: a copy stays in your computer's temp folder (jarvis-ekler); copies older than a day are deleted at the next paste.

On Windows, the permissions step of the first launch opens the microphone for 2.5 seconds to show whether it works; this audio is not sent anywhere. Microphone audio and camera frames are never written to disk. The chat isn't kept as a separate history and disappears from the screen when the app closes; its written transcript stays in the log file.

2. What goes to Google Gemini

The assistant runs on Google's Gemini API. The connection is made with your key, directly from your computer to Google. While the assistant is awake, the following is sent to Google:

Your voice: while the assistant is awake and the microphone is on, microphone audio streams to Gemini continuously. There is no wake word, so everything the microphone hears during that time is sent. Gemini detects when you finish speaking. The MİKROFON button in the top bar (F4) releases the microphone completely: no audio is sent, the microphone device closes and your system's microphone indicator goes off (within a few seconds on macOS); the assistant stays in the conversation and you can type. You can put the assistant to sleep by tapping the orb or saying “sleep”; nothing is sent to Gemini while it sleeps.
What you type and files you attach (drag and drop, paperclip or paste): photos, PDFs, documents, video frames, folder listings. The file's location on your computer is sent too.
Camera frames: only while the camera is on, at most one frame per second. You turn it on with the KAMERA button in the top bar (F6); the assistant can also turn it on when you ask it to look, and the top bar then shows it as on. The camera turns off when the assistant goes to sleep.
Screenshots: only when you ask what is on your screen: an image of the window in front, the app's name and the window title. On macOS the image goes to a separate Gemini request with the same key, not to the conversation session; the assistant only sees that request's answer.
Session details: when each session starts, the date and time, your chosen chip's character and the remembered facts (names of WhatsApp contacts; their numbers are not included and are looked up on your computer when a message is sent). Google keeps the conversation context during the session, and for a period Google sets afterwards, so the conversation can resume after sleep or a dropped connection.
Internet search: when you ask about something current (exchange rates, a match result, the news), the assistant sends the question as text to a separate, short Gemini session opened with the same key; Gemini searches it with Google Search and brings the answer back to the conversation. The question and the answer go to Google. ULTRON does not search while story mode is on.
Tool results: results of tools the assistant uses at your request, such as the names and locations of files it found, content it read, calendar and reminders, system information (on Windows including your Wi-Fi network name; recent macOS versions don't give apps the network name, so on a Mac only the local IP address), weather and the song playing; on macOS, names of people found in Contacts for WhatsApp.
Commands: at your request the assistant can run commands on your computer (PowerShell on Windows, the shell (sh) on macOS; no Terminal window opens); the command output goes to Gemini too. Most destructive commands, such as deleting files, are blocked, but this is not a complete safeguard.
Speaking on its own: after a long silence, for water and break reminders, and 15 minutes before an event, the assistant speaks first. For this it sends the time, how long you have been at the computer (minutes only, never your keystrokes), upcoming events, reminders and your latest notes. This is on by default; turn it off in Settings › KONUŞMA (Conversation). In addition, when a timer ends its name, and on Windows when a reminder is due its title, goes to Gemini so the assistant can tell you; these don't depend on the KONUŞMA settings.

This data is subject to Google's terms: Gemini API Additional Terms of Service and the Google Privacy Policy.

Important: on the Gemini API free tier, Google may use submitted content and responses to improve its products, and human reviewers may read them. Don't share sensitive or personal information on the free tier. On the paid tier, Google doesn't use this content to improve its products. See the terms above for details.

3. Other services

Service	What is sent	When
wttr.in	Your IP address and the city you typed as your location; if you didn't type one, wttr.in finds your approximate location from your IP address. The name of any other city whose weather you ask about.	At launch, and about every 10 minutes while the weather or map panel is shown; when you ask for the weather or where you are on the map; when you change your location.
OpenStreetMap	Your IP address and the area shown on the map; the name of a place you searched for; the place you typed in Settings › GENEL › KONUM (Location), to find it on the map via Nominatim.	While the map panel or the large map is open; when you ask about a place or for directions; when you save KONUM.
YouTube	Your IP address, the JARVIS version and your search words, to find the first video.	When you ask it to play something on YouTube; on Windows also when you ask it to play something and Spotify isn't installed.
GitHub	Your IP address and the JARVIS version. The update file is also downloaded from here.	Shortly after launch, every 6 hours while the app is open, and when you press DENETLE (check) in Settings › HAKKINDA, to check for a new version. The file is downloaded only when you press GÜNCELLE (update).
Google	Your key, only to check that it works.	When you save your key.
Wikimedia Commons	Your IP address, to load public-domain archive images.	Only while story mode is on.
Cloudflare	Traffic between your phone and your computer (voice, conversation, tool results, files you share, memory synced with the iPhone app) passes through Cloudflare's tunnel; the connection's encryption is opened and re-applied on Cloudflare's servers. Cloudflare's DNS service (1.1.1.1) is also asked about the tunnel address.	For as long as the phone connection is on (TELEFONU BAĞLA, “connect phone”, or AÇILIŞTA HAZIR OLSUN, “ready at launch”; pairing the iPhone app turns the latter on automatically). If you connect from your phone's browser, traffic goes through this tunnel even on the same Wi-Fi. The phone connection is not available on Windows yet.
ntfy.sh	Your IP address and your computer's encrypted connection address. Only a device that knows the access code (the QR code) can decrypt the address; ntfy.sh can't see it.	When the phone connection opens with a tunnel, when you press YENİ KOD (new code), and every 6 hours while the connection stays on. ntfy.sh keeps the message for up to 12 hours.

While the phone connection is on, your computer's name and local address are announced to devices on the same Wi-Fi (Bonjour), so the iPhone app can find it. The access code is never announced.

For Google searches, directions (Apple Maps on macOS, Google Maps on Windows), WhatsApp and Spotify, JARVIS opens the relevant app or your browser; that app's or site's own privacy rules apply. On WhatsApp, if it is clear that you want the message sent (for example “send”, or “tell Mom good night”), JARVIS sends it without asking; if you say “prepare” or “don't send”, it leaves a draft. The AI makes this call; if you want to see the message first, ask for a draft.

4. Story mode

An optional game. While it is on, some scenes draw on information from your computer; that information is only shown on your screen and is never sent anywhere. Your story progress is added to the assistant's instructions. Turn it off in Settings › GENEL › HİKÂYE MODU (story mode); your progress is kept.

5. Permissions

Every permission is optional. A feature that depends on a permission you didn't grant won't work; everything else will.

macOS: Microphone (conversation), Camera, Screen Recording (describing your screen), Accessibility and Automation (Spotify, Music, WhatsApp, System Events and your browser for WhatsApp Web; at your request), Contacts (finding the number of the person you want to message on WhatsApp), Calendars and Reminders, the Desktop, Documents and Downloads folders (finding and reading files), Local Network (phone connection). Location Services, Photos and Full Disk Access are never requested. Change permissions in Settings › İZİNLER (Permissions) or in System Settings › Privacy & Security. Some permissions may appear there under the names of JARVIS's helpers: JARVIS Calendar Helper (Calendars, Reminders), JARVIS Screen Helper (Screen Recording), JARVIS Voice Helper (Microphone).
Windows: the microphone and camera follow the switches in Windows Settings › Privacy & security; reading your Wi-Fi network name also depends on the Location switch there (Windows 11 24H2 and later). Windows doesn't ask permission for file or screen access. JARVIS's file-finding tool searches only the Desktop, Documents, Downloads and Pictures folders and only at your request, skipping hidden files and files that look like keys or passwords. PowerShell commands it runs at your request are not bound by these limits and can reach any file your Windows account can.

6. Deletion and control

Microphone and camera: the buttons in the top bar. Sleep: tap the orb or say “sleep”; nothing is sent to Gemini while the assistant sleeps.
Memory: in Settings › HAFIZA you see every fact the assistant remembers and delete them one by one; HEPSİNİ UNUT (forget all) deletes them all (the previous state stays in the data folder as a backup). You can also tell the assistant what to forget.
Notes: delete them one by one in the NOTLAR (Notes) panel (turn it on in Settings › PANELLER, “Panels”) or press TÜMÜNÜ SİL (delete all); you can also ask the assistant.
EN BAŞTAN BAŞLA (start over; Settings › GENEL): moves the whole data folder (settings, memory and WhatsApp contacts, notes, calendar and reminders on Windows, log and story) into a folder named “JARVIS V4 yedek …” (backup) and opens JARVIS as if newly installed. Your Gemini key, operating-system permissions and files the assistant created stay. Delete that folder if you don't want the backup.
Log: you can delete jarvis.log and jarvis.old.log in the data folder (on Windows also %LOCALAPPDATA%\JARVIS V4\konsol.log) at any time.
Key: change it in Settings › GENEL. To remove it completely, delete the items named “JARVIS V4” in Keychain Access (macOS) or Credential Manager (Windows); on macOS the phone connection's code is stored under the same name. If the key is in the settings file, deleting the data folder removes it too. Deleting the key at aistudio.google.com/apikey revokes it immediately.
Uninstalling: on Windows the uninstaller removes the program and update files; on macOS, moving JARVIS to the Trash removes the app. In both cases your data, backups and key stay. To remove everything, delete the data folder, the “JARVIS V4 yedek …” folders next to it and the “JARVIS V4” key items; on Windows also the %LOCALAPPDATA%\JARVIS V4 folder, on macOS the ~/Library/Caches/JARVIS V4, ~/Library/Caches/com.alpunlu.jarvis.mac and ~/Library/WebKit/com.alpunlu.jarvis.mac folders (the interface's cache), and the jarvis-ekler folder in the temp folder. On macOS you can remove the permissions in System Settings › Privacy & Security.
Data at Google: the developer holds no record of content sent to Google. For requests about that data, use Google's privacy tools.

7. Children

The app is not directed at children. Getting a Gemini API key requires meeting Google's age requirements.

8. Changes

If this policy changes, the current version is published on this page with a new date.

9. Contact

For issues, questions or requests: [email protected] or the issue form (in Turkish)