Privacy and data flow

Know exactly where the data goes.

PhoneClaw is local-first. Chat, images, and personal data stay on the iPhone by default. The only exits are explicit user actions.

Short version

The default experience runs on iPhone.

Inference and native iOS Skill calls run on-device by default. Data leaves the phone only when you ask PhoneClaw to use the public web or when you explicitly pair a Mac for remote inference.

Default path

Local model, local Skills, local summaries, local permission checks.

Public web path

Only for Web Search or opening a URL you ask PhoneClaw to read.

Mac path

Only after pairing your Mac and selecting a Mac-side model.

Data table

What stays on iPhone.

Permission-scoped iOS data is read after you grant access. Each Skill follows the permission scope provided by iOS.

DataProcessing pathDefault behavior
Chat messages On-device model context and local conversation state. Stays on iPhone
Images and camera input On-device multimodal model and LIVE mode pipeline. Stays on iPhone
Calendar, Reminders, Contacts Native iOS APIs after explicit permission. Stays on iPhone
Clipboard Local task step, useful for multi-step workflows. Stays on iPhone
HealthKit summaries Steps, distance, calories, heart rate, sleep, workouts, and related summaries after permission. Stays on iPhone
Web Search query Sent to a search provider only when you explicitly ask for realtime public information. Explicit action only
Specific public URL Fetched from the target website only when you ask PhoneClaw to read that page. Explicit action only
Mac remote inference request Sent to your paired Mac on the same LAN. With Ollama it stays on that Mac; other providers follow their own policy. Opt-in only

Boundaries

PhoneClaw's operating model.

PhoneClaw is designed for iPhone resources, iOS permissions, local models, scoped Skills, and explicit network actions.

Local data

Data stays on iPhone

Chat, images, and personal data stay on the device by default.

Offline path

Fully offline local mode

The default local path uses on-device models and native iOS Skills.

Explicit network

User-triggered network paths

Web Search, URL reading, and Mac remote inference run when the user selects those capabilities.

iOS native

Permission-scoped actions

PhoneClaw works through iOS permissions, native APIs, App Intents, Shortcuts, and focused Skills.

中文

数据流向一句话版本。

PhoneClaw 默认在 iPhone 本地完成推理和 iOS 原生 Skill 调用。聊天、图片和个人数据留在设备端。联网搜索、打开网页和配对 Mac 远程推理是用户显式触发的能力。