App privacy policy

This policy covers the Android app “Egolino” (for now “Egon” on Google Play, package io.egons.egon).

Controller

SCAFA INVESTMENTS LLC, 9830 Bahama Dr, Cutler Bay, FL 33189-1568, USA, info@scafa-investments.com

In short: Egolino has no account, no sign-in, no ads, no tracking and no analytics tools. Without cloud AI, Egolino thinks on your phone. Only what you switch on or trigger yourself goes online, and each case is listed below.

1. What is stored on the device

Your conversations with Egolino, what Egolino has learned about you (your name, memories, facts), your notes, habits and mood entries, keys for AI providers if you enter any, and your settings. All of this sits in the app’s private storage and is not transmitted, except in the cases under 2. There is no cloud backup.

2. What leaves the device

• With On-Device, your conversations stay on the phone. Egolino’s answers are then computed by a language model on your phone.
• Cloud AI, only with your own key and your explicit yes. In the settings you can enter the key of an AI provider. Egolino sends nothing there until you have agreed, and only to providers you agreed to one by one (main and, if set up, backup provider). The choices are: Groq (Groq, Inc., USA), OpenRouter (OpenRouter, Inc., USA; depending on the model it passes your message on to that model’s operator, also outside the EU, for example in China), Moonshot/Kimi (Moonshot AI, China), OpenAI (USA), Google Gemini (Google, USA), Anthropic (Anthropic, PBC, USA), NVIDIA (NVIDIA Corporation, USA), DeepSeek (DeepSeek, China) and your own server at an address you enter yourself; then you decide where the data sits.
  • What then goes to the provider: your message, the conversation so far, what Egolino has learned about you (name, memories, facts), his mood and entries from his diary, which also say what he suspects about your mood and what you have been through together, your notes when the conversation is about them, and images or files you attach. This can be very personal, for example about your health. The same goes to the provider without you doing anything when Egolino thinks, dreams or writes his diary in the background and when he makes a daily summary. If Egolino looks something up online for you, the search query goes to the same provider; with Google it runs through Google Search. Appointments, birthdays and contacts are only included if you ask about them yourself. The same goes for your notifications, once you have allowed Egolino to read them: if you ask, the app, sender and text go to the provider. They can contain what other people wrote to you, such as the start of an email, and codes that apps send you. The list of your apps is never included.
  • The provider processes the data under your key and its own terms, including in countries outside the EU (USA, China) where the level of data protection may be lower. You withdraw your yes by switching back to “On-Device” under “Heartbeat”; if you switch provider, Egolino asks again.
• Creating images, only if the provider you agreed to is Google Gemini: your image description then goes to Google, and for “try-on” also the photo of a person you pick for it. Only pick photos you are allowed to use for this.
• Downloads when you ask for them: If you download a language model, the app fetches a model file from huggingface.co (Hugging Face, Inc., USA); if you download a voice, a voice pack from github.com (GitHub, Inc., USA). In doing so, your device sends the technically necessary connection data (IP address and the request for the file).
• Weather, only when you ask for it or have entered a city: the app then sends the name of the city you entered in the settings, told Egolino or mentioned in your question to the weather service Open-Meteo (open-meteo.com, OpenMeteo GmbH, Bürglen UR, Switzerland; Switzerland is covered by an EU adequacy decision, so its level of data protection is recognized as equivalent). The service uses it to find the place and returns the forecast for that approximate location; in doing so it sees the technically necessary connection data (IP address). Your precise location, an account or your conversation are not sent, and the app does not ask for location permission.
• If you speak instead of typing, the app uses your phone’s speech recognition. It does not belong to us. On most devices it is a Google service; in that case your voice leaves the device and is processed under Google’s terms. If you don’t want that, type to Egolino.
• If another app of ours is installed on the same phone, both apps can share one language model instead of loading it into memory twice. The other app then computes the answer: the conversation excerpt goes to that app within the phone and the answer comes back. None of it leaves the device, and neither app stores the other’s content. Both apps come from us and recognize each other by their signature.
• Purchases, only if you buy a marble pack: Google Play handles the payment and receives your details under its own terms. We get no payment data, only the confirmation of the purchase, and that stays on your phone.
• Playing online, only if you choose it yourself in the game world (arena and run): The type of your Egolino, his items, your moves and the app’s identifier then go to our game server at egons.io. Your opponent sees the type and items. Your device transmits its IP address in the process. Your name, conversations and a device ID are not sent. The server is run by Hetzner Online GmbH in Nuremberg, Germany. Game rooms exist only in memory, nothing is written to disk, and a room is deleted at the latest 5 minutes after the game or after 30 minutes without activity. We keep no access logs; the IP address is used in memory only to limit too many new rooms.
• If you report an answer, the app sends the text of that one answer and a technical identifier of your Egolino (derived from his name) to our server konto.egons.io (hosted by Hetzner Online GmbH, Germany). It does not send the conversation history or an account; whatever the reported answer itself contains, such as your name, is included. The server sees your IP address; it uses it only to prevent abuse and does not store it together with the report. We use reports only to improve Egolino’s answers and delete them after 90 days at the latest. If the app cannot reach the server, it offers an email to info@scafa-investments.com instead, which is only sent if you tap Send yourself; your email provider processes it under its own terms. We also delete such emails after 90 days at the latest.

3. Permissions and what they are for

• Display over other apps and foreground service: Egolino can sit on your home screen when you let him out.
• Microphone: only when you talk to Egolino. Nothing is recorded and nothing is stored.
• Camera and storage (storage up to Android 12 only): when you take a photo for Egolino or pick one in the system’s photo picker. The camera is also used to read the QR code of a game invitation.
• Calendar: so Egolino can read your appointments and add or delete one when you ask.
• Read notifications (you turn this on yourself in Android’s settings): so Egolino can tell you, when you ask, who wrote to you and what it is about. Egolino reads the notifications, not your email account. Without the cloud, everything stays on the phone.
• Contacts: so Egolino can find a number when you ask, and remind you of birthdays in the morning briefing.
• Selectable as assistant and speech recognition: You can set Egolino as your default assistant in the Android settings; for this the app registers a voice service. Egolino only listens when you call him.
• Set alarms: Egolino opens your phone’s clock app for this.
• Notifications, run at startup, vibration, keep awake: for reminders and so that they survive a restart.
• Internet and network state: only for the cases under 2. Audio settings: to play Egolino’s voice.
• Fingerprint/biometrics: declared by an included library; Egolino does not use it.

4. Age

Egolino is for adults, 18 and over. We do not knowingly collect data from minors. If you have reason to think we did, write to us and we will delete it.

5. Your rights

We hold nothing about you except an answer you have reported. It contains whatever the answer said, but no contact details, so as a rule we cannot link it to you. You delete everything the app knows about you yourself, in the app or by uninstalling it. What you have sent to a cloud provider you manage with that provider. Legal bases: for cloud AI and creating images, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time; for downloads, weather, online play, purchases and speech input, carrying out what you ask the app to do (Art. 6(1)(b) GDPR); for reports, our interest in fixing errors in the answers (Art. 6(1)(f) GDPR). You have the right of access, rectification, erasure, restriction, data portability and objection; write to us informally at info@scafa-investments.com. You also have the right to lodge a complaint with a data protection supervisory authority.

6. Email and where we are based

If you email us, we use the message only to answer you (Art. 6(1)(b) or (f) GDPR) and delete it once it is dealt with, after 90 days at the latest, unless the law requires longer. Our mail server (mail.scafa.de) runs on a server of Hetzner Online GmbH in Germany. SCAFA INVESTMENTS LLC is based in the USA, so your email is also processed there.

7. Changes

Last updated: November 5, 2026.