// Privacy
Prompy Privacy Policy
Last updated: 2026-05-30
Prompy is a prompt optimizer that runs entirely on your own device using your own AI provider API key. We designed it to collect nothing.
What Prompy stores
-
Your API keys are stored device-only, never cloud-synced:
- Browser extension →
chrome.storage.local(this browser on this device only). - Desktop app → encrypted at rest via the OS keychain (Electron
safeStorage) — stored as ciphertext, not plaintext.
- Browser extension →
- Non-secret preferences (provider, model, style, delay) use
chrome.storage.syncso they roam across your Chrome. These contain no secrets. - Usage stats (prompts improved, estimated tokens refined) are stored locally for your own display and never leave your device.
What Prompy sends, and to whom
- When you improve a prompt, the prompt text is sent directly from your browser/app to the AI provider you selected (Anthropic, OpenAI, Google, or Mistral), authenticated with your API key.
- The request goes straight to that provider's API. No Prompy-operated server is involved, and we never receive, log, or store your prompts.
- Your prompts are subject to the privacy policy of whichever provider you choose.
- Local models (Ollama / LM Studio): with the Local provider, prompts go only to a model server on your own machine (e.g.
http://localhost:11434) — nothing is sent to any third party. -
Conversation context: to fit suggestions to what you're working on, Prompy can include the surrounding conversation with the draft sent to your chosen AI provider. It goes only to that provider, never to us.
- Extension (on by default): reads the visible conversation on the current page; disable it in the popup ("Use page conversation as context"). When off, only your draft is sent.
- Desktop app (manual only): context is sent only when you paste it into the Playground or capture it from your clipboard (
⌘⇧K/Ctrl+Shift+K). The desktop app never reads other apps' windows.
What Prompy does NOT do
- No analytics, telemetry, tracking, or advertising.
- No accounts, sign-in, or cloud sync operated by us.
- No selling or sharing of data — there is no data to sell or share.
- No collection of browsing history or personal information. Page content is used only as conversation context (see above), only while enabled, and only sent to your chosen AI provider.
Permissions (browser extension)
- storage — save your settings (keys device-only) locally.
- activeTab + host access to supported AI sites — show the suggestion overlay where you type.
- host access to the four AI API domains — send your prompt to your chosen provider.
Contact
Prompy is built by Arhaan Khan. Questions or issues — reach out at arhaankhan7b@gmail.com or prompy922@gmail.com.