Private Toolbox

1. Summary

Private Toolbox is an offline-first productivity application. Every tool in the app — including the on-device AI chat, the AI translator, and the QR/barcode scanner — runs entirely on your own device. The app does not include user accounts, advertising trackers, or analytics systems controlled by the developer. The only times the app uses the network at all are:

• When you explicitly tap "Download" on an AI chat model or a speech-to-text model, so the model file can be fetched.
• When the AI Translator needs a language pack (one-time download, ~30 MB per language) it fetches it via Google Play Services on demand. After that, translation runs fully on-device.
• When you tap an external link (for example, opening this privacy policy).
• When you use "Report Bug", which launches your email app so you can send us a message.

2. What the app processes on your device

The following is generated and stored locally. It is never sent to us or to any third party:

• Documents you scan, convert, merge, or modify (PDFs, images)
• QR codes and barcodes you scan or generate — decoded on-device by the Google ML Kit Barcode Scanning model, which is bundled with the app
• Images you compress, resize, or convert between formats (PNG, JPG, WebP, etc.)
• Text you count, transform, hash, or encode
• Notes from the notepad
• Calculator, graphing calculator, unit converter, and number base results
• Timer and stopwatch data
• Local AI chat messages and history — the language model runs on your device and your prompts never leave it
• AI Translator input — language identification, speech-to-text (Whisper via ONNX Runtime), and translation all run locally on your device (see section 3.2 for the one-time language-pack downloads).

3. AI model downloads

Some of the app's AI features need a model file to work. The app only fetches these files when you explicitly request them, and only the file itself is downloaded — no user content, no account data. There are two independent download paths:

3.1. Chat LLMs and speech-to-text (Whisper) models. Before you can chat with the Local AI Chat or use voice input in the AI Translator, you have to tap "Download" on one of the available models. When you do, the app performs a plain HTTPS GET request to a public URL to fetch the model file — nothing more:

• At the moment, the model files the app points at are hosted on the public servers of huggingface.co. The app is not integrated with any Hugging Face service, SDK, or account system — it just downloads a file, the same way a web browser would.
• No personal information, account data, or chat content is sent with the request. Only the model file is requested.
• As with any internet request, the remote server can see standard metadata such as your IP address and user agent. How that host handles this data is governed by its own privacy policy, which we have no control over.
• Once the download finishes, the feature works fully offline. No further network requests are made to use it.

We may change the host from which these model files are downloaded in the future without changing this policy, as long as the nature of the request (an anonymous HTTPS download of a public file) stays the same.

The AI models fetched this way are open-weights models distributed by their respective publishers under their own licenses — for example, Microsoft's Phi-4 Mini (MIT), OpenAI's Whisper (MIT), and Google's Gemma (under the Gemma Terms of Use). The app only acts as a downloader; by using a given model you are responsible for complying with that model's license.

3.2. AI Translator language packs (Google ML Kit). The translation step of the AI Translator uses Google ML Kit's on-device translation, which requires per-language neural model packs (~30 MB each). The app manages these packs through the Google ML Kit SDK, which in turn downloads them via Google Play Services:

• A language pack is downloaded automatically the first time you translate to/from that language, or manually when you tap "Download" for a language in the translation model manager.
• The request is handled by Google Play Services on your device. What the app sends to ML Kit is only the identifier of the language you asked for — never the text you are translating, never recorded audio, never chat history.
• Google's handling of Play Services downloads is governed by Google's Privacy Policy.
• Once a language pack is installed, all translation runs fully on your device. Text you translate, audio you record, and the produced translations are never sent to Google or to us.
• You can delete any language pack at any time from the translation model manager inside the app.

4. Bug reports

When you use the "Report Bug" feature, the app opens your email client pre-filled with our support address. If you decide to send the message, you voluntarily share your email address, any device information you choose to include, and your description of the issue. We use this only to reply to you and to fix problems in the app.

5. Third-party services

• Google Play Services — for app installation, updates, the in-app rating prompt, and on-demand delivery of Google ML Kit language packs used by the AI Translator. Governed by Google's Privacy Policy.
• Google ML Kit (on-device) — used locally for (a) QR and barcode decoding in the scanner (model bundled with the app), (b) automatic language identification in the AI Translator, and (c) text translation in the AI Translator. All three run on your device; see section 3.2 for the one-time translation-pack downloads. Governed by ML Kit Terms of Service and Google's Privacy Policy.

The servers that host the chat-LLM and Whisper model files (currently huggingface.co) are not integrated services — the app just downloads a public file from them. They are treated the same way as any website you might open in a browser.

Some third-party libraries and platform components used by the app (for example, through the Android operating system or Google Play Services, including services provided by platform vendors such as Google) may automatically collect limited technical or diagnostic information, such as device characteristics or performance data. These processes are outside of the developer's control, do not involve user-created content, and are governed by the respective providers' privacy policies.

6. Permissions

• Camera — to scan QR codes, barcodes, and documents.
• Microphone — to record audio input for the AI Translator's voice modes (speech-to-text runs locally, see section 2).
• Storage — to save and load files, notes, chat histories, downloaded AI chat/speech models, and downloaded ML Kit translation language packs.
• Internet — to download AI chat/speech model files when you explicitly request them, to download ML Kit translation language packs via Google Play Services, and to open external links (such as this privacy policy).

7. Your data, your control

• You can delete any file, note, chat, downloaded AI model, or installed ML Kit translation language pack at any time, from inside the app or via your device's file manager.
• Uninstalling the app removes all of its locally stored data, including any downloaded AI models and ML Kit translation language packs.
• Because we don't have servers that store your data, there is nothing to request, export, or delete from our side.

If you are located in the European Union, the General Data Protection Regulation (GDPR) grants you the rights of access, rectification, erasure, portability, objection, and restriction of processing, as well as the right to lodge a complaint with your local supervisory authority (for example, the AEPD in Spain). Since Private Toolbox does not collect, store, or process any personal data on remote servers, there is nothing on our side for you to access, correct, export, or delete — but these rights are formally acknowledged here.

8. Children's privacy

Private Toolbox does not knowingly collect personal information from children. Since the app works entirely offline for its core functionality and does not collect data from users of any age, there is nothing to collect in the first place.

9. Disclaimer and limitation of liability

The app is provided "as is" and "as available", without warranties of any kind, express or implied, including but not limited to merchantability, fitness for a particular purpose, accuracy, or non-infringement. To the fullest extent permitted by applicable law, the developer is not liable for any data loss, device damage, financial loss, or any other direct, indirect, incidental, or consequential damages arising from the use of, or inability to use, the app. You use the app at your own risk.

This clause does not limit any rights that cannot be waived under mandatory consumer-protection laws in your jurisdiction.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any change will be reflected by updating the "Last Updated" date at the top of the page.

11. Contact

Questions or concerns? Email privatetoolboxapp@gmail.com. This is the only official channel for privacy-related inquiries about the app.

12. About the developer

Private Toolbox is built and maintained as a personal, non-commercial project under the developer identity Toolbox Labs, registered on Google Play. Toolbox Labs is not a registered company, partnership, or legal entity — it is the public name of an independent individual developer. The app is distributed free of charge, contains no advertising, does not generate revenue, and does not operate any backend servers.

For any formal or legal inquiry, the contact point is the email address listed in section 11. Google Play holds the verified legal identity of the developer behind Toolbox Labs and is the appropriate channel for competent authorities to request that information when required by law.