Privacy Policy

How we handle your data and protect your privacy.

Last updated: February 2026

Introduction

At One Thirteen, we take your privacy seriously. Bit Buddy is a personal device manager designed with a privacy-first approach. With v3.0, Bit Buddy introduces iCloud Sync, AI-powered insights, widgets, and Auto Add — all built around a Hybrid Privacy Model that gives you full control over what data leaves your device and what stays local. This Privacy Policy explains how each feature handles your data.

Data Storage Architecture (Hybrid Privacy Model)

Bit Buddy uses a dual-layer storage system that architecturally separates sensitive data from non-sensitive metadata. Sensitive information is prevented from syncing at the code level — it is not simply a setting, but a structural guarantee.

Synced Data (via Apple CloudKit)

The following non-sensitive metadata may sync across your devices when iCloud Sync is enabled:

• Device name, capacity, and type
• Tags, colors, and icons
• Favorite and important flags
• Purchase date
• Maintenance task schedules

Local-Only Data (Never Syncs)

The following sensitive data is stored exclusively on the device where it was entered and is never transmitted anywhere:

• File contents and storage breakdowns
• Physical addresses and GPS coordinates
• IP addresses
• Personal notes
• Maintenance task and log descriptions

iCloud Sync

Bit Buddy uses Apple CloudKit for cross-device sync:

• All synced data is end-to-end encrypted by Apple
• Data is stored exclusively on Apple's iCloud servers
• Sync can be disabled entirely via the Settings toggle
• Requires an iCloud account signed in on your device
• Sensitive fields (notes, locations, file contents) remain on the device where they were entered — they are never included in sync operations

On-Device AI (Foundation Models)

On devices running iOS 26 or later, Bit Buddy offers AI-powered insights processed entirely on your device:

• 100% on-device processing using Apple's built-in Foundation Models
• Works completely offline — no internet connection required
• No data is transmitted to any server, including Apple
• No third-party AI services are involved
• Neither One Thirteen nor Apple can see your queries or results

Cloud AI Providers

For devices below iOS 26, Bit Buddy offers an optional cloud-based AI alternative:

• Cloud AI is entirely opt-in — you choose whether to enable it
• Uses the OpenRouter API, proxied through a secure Vercel endpoint
• Your data is automatically anonymized before transmission

Anonymization Process

Before any data is sent to the cloud AI provider, Bit Buddy applies automatic anonymization:

• Device names are replaced with generic types (e.g., "External Drive")
• Exact purchase dates are converted to relative ages (e.g., "2 years old")
• Notes, file contents, location data, IP addresses, and physical addresses are completely excluded

What IS Sent

• Anonymized device type and category
• Capacity and usage percentage
• Content type classification
• Status flags (e.g., favorite, important)
• Tags
• Maintenance task count (not descriptions)

What is NEVER Sent

• Device names
• Personal notes
• File contents or storage breakdowns
• Location data or GPS coordinates
• IP addresses or physical addresses
• Exact purchase dates

Widgets

Bit Buddy's widgets provide at-a-glance information on your home screen and lock screen:

• Widgets read from a local SwiftData container shared via App Group (group.com.bitbuddy)
• The widget extension makes no network requests
• Widgets only display non-sensitive data (device names, capacity, status)
• Lock screen widgets show non-sensitive information only

Auto Add (Device Detection)

Auto Add helps you quickly log connected devices:

• All device detection happens entirely on your device
• No external network requests are made during detection
• You must confirm before any detected device is added to your library

Third-Party Services

Bit Buddy uses the following third-party services:

• TelemetryDeck: Anonymous usage analytics to help improve the app. No personal data is collected.
• RevenueCat: In-app purchase processing. Handles payment securely.
• Apple CloudKit: iCloud sync infrastructure. Data is end-to-end encrypted and stored on Apple servers only.
• Firebase Remote Config: AI model configuration. No user data is sent.
• OpenRouter: Cloud AI processing. Receives only anonymized data and is entirely opt-in.
• Vercel: Proxy endpoint for cloud AI requests. No data is stored.

Security Features

Bit Buddy includes several security features to protect your data:

• Secure Wipe: Completely removes all data from Bit Buddy
• Face/Touch ID: Biometric authentication for accessing your data
• Local-Only Storage: Sensitive data never leaves your device
• CloudKit Encryption: All synced data is end-to-end encrypted by Apple

Your Controls

You have full control over how Bit Buddy handles your data:

• Disable iCloud Sync entirely to keep all data on-device
• Choose on-device AI only — no cloud processing required
• Cloud AI is opt-in and can be turned off at any time
• Use Secure Wipe to permanently remove all data from the app

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

privacy@onethirteen.co