Your work. Your choices. Clear data paths.

Website and desktop workspace

The AirWork website asks for no account and uses no advertising trackers. Our hosting provider necessarily processes standard request data such as IP address, user agent, requested URL, and security events to deliver and protect the site.

AirWork Desktop is local-first: its runtime, settings, and work history stay on your computer unless you choose a model provider, connector, or Remote feature that needs data to leave the device.

Mobile Chat and your own API keys

AirWork Mobile encrypts and stores provider API keys only in device security storage, such as Apple Keychain or Android Keystore. A key is sent directly to the provider you choose only when needed to authenticate your request; it is not placed in ordinary preferences, analytics, or crash logs.

Prompts, conversation context, attachments, and model responses travel to the model provider or custom endpoint you select. If you select AirAPI, AirAPI processes the request and credential needed to provide that service. Each external provider applies its own terms and privacy policy.

Only in the Google Play build, you can choose Report on an AI response and confirm before anything is sent. AirWork then sends that response (up to 4,096 characters), a local message identifier, optional provider/model identifiers, and the app platform/version to Endless AI LLC for safety review. The report is associated with a pseudonymous installation, rate limited, not used for advertising or model training, and deleted within 30 days. It does not include your prompt, surrounding conversation, attachments, or API key.

Remote and paired computers

Remote pairs a phone with a computer you explicitly approve so you can send tasks, follow progress, answer approval requests, and receive artifacts; it is not general screen control.

Task, approval, progress, and artifact contents are end-to-end encrypted between the paired devices. The relay can process pseudonymous device and route identifiers, public keys, connection state, timestamps, sizes, and encrypted payloads needed for delivery, but not their plaintext. Relay durable storage is configured for the United States, while network traffic may pass through Cloudflare's global edge. Pairing codes expire after 10 minutes, undelivered encrypted frames after at most 1 hour, and encrypted artifacts after at most 24 hours. Revoking a computer disables its capability and clears queued delivery data.

Purchases and payments

Apple processes purchases in the iOS app, Google processes purchases in the Google Play build, and Stripe processes purchases in the direct Android build. AirWork may receive product, purchase status, entitlement, and transaction identifiers needed to unlock or restore Pro and prevent fraud.

Endless AI LLC does not receive your full payment-card details from Apple, Google, or Stripe. Their privacy policies govern the payment information they collect.

Retention and deletion

Local settings, API keys, chats, and files remain until you remove them, clear app data, or uninstall, subject to device backups you control. Confirmed Google Play AI-response reports are deleted within 30 days. Payment-provider event records used for reconciliation and security are deleted after 90 days unless a longer period is legally required. Minimal revoked Remote capability metadata may remain to prevent replay and document revocation.

The in-app Delete service data control removes the pseudonymous installation, any AirWork-held Google Play safety reports, and its entitlements and purchase-verification records that are owned only by that installation. It does not erase local chats or provider keys, Remote records for other paired devices, records retained by Apple, Google, Stripe, a model provider, or a custom endpoint, or limited records we must retain for security, accounting, disputes, or law. We do not sell personal information or use prompts, model responses, Remote task bodies, or file contents for advertising.

Your controls, security, and service providers

You can remove provider keys, clear local conversations, revoke paired computers, use Delete service data for installation-linked AirWork records, and control device permissions in system settings. If that control is unavailable, email help@airworkos.com. Removing AirWork data does not delete data already sent to a model provider, payment processor, or custom endpoint; contact that provider separately.

We use service providers only to run functions such as hosting, relay delivery, model access you request, payments, and security. Data may be processed where those providers operate. We use reasonable safeguards, but no network or storage system can be guaranteed completely secure.

Children, changes, and contact

AirWork is not directed to children under 13 or the minimum digital-consent age in their country. If you believe a child provided personal information, contact us.

We may update this policy as Mobile, Remote, or legal requirements change. We will change the effective date and provide an in-product notice when a change materially affects how an available feature handles data. Questions or requests: help@airworkos.com.