Your browsing,
stays on your device

Scope

This policy covers AriRoam, the iOS browser. It is built by arilabs and shares the same data-handling philosophy as our other apps: keep it local, keep it under your control, don't collect what we don't need.

What we collect

Nothing automatically. AriRoam has no backend that collects personal information from you. There is no account system, no analytics pipeline, and no crash-reporting SDK phoning home. We don't know how many people are using the app, what sites they visit, or what models they run.

There is no marketplace, no social surface, and no shared cloud database. AriRoam ships with no remote attack surface to misuse.

What stays on your device

AriRoam stores the following locally, inside the iOS app sandbox:

• Open tabs and Spaces — saved to a JSON file in Application Support so closing the app and reopening it brings everything back where it was.
• Browsing history — capped at the most recent ten thousand entries; never transmitted off-device.
• Bookmarks — your saved pages.
• Pinned sites — the icons on your home quick-access rail.
• Recently closed tabs — last 20 closed tabs so you can reopen them.
• Ari chat history — the conversations you have with the AI assistant, per surface.
• Cookies, local storage, IndexedDB and HTTP cache — the standard WebKit website data, kept persistent so sign-ins survive across launches. You can wipe all of it from Settings → Manage → Erase all data.
• Provider configuration — which AI providers you have set up, which is active, which model is selected.
• API keys and OAuth tokens — stored in the iOS Keychain; never transmitted except to the provider you selected.
• Preferences — search engine, default new-tab URL, onboarding flag — stored in UserDefaults.

When you delete the app, iOS removes all of this. There is nothing to delete on our side because there is nothing stored on our side.

Third-party AI providers

AriRoam is bring-your-own-key. You choose which AI to talk to and supply credentials. Supported providers include Apple Intelligence (on-device, free), Anthropic, OpenAI, OpenRouter (one-tap OAuth), Ollama (local or cloud), and ChatGPT via Codex sign-in.

When you connect a provider:

• The API key or OAuth token bundle is stored in the iOS Keychain on your device.
• Prompts and completions travel directly from your device to that provider's API. They do not pass through any AriRoam server because there is no AriRoam server.
• Each provider has its own privacy policy. Your usage of them through AriRoam is governed by their terms, not ours.

Apple Intelligence (when enabled on a supported iPhone) runs entirely on the Neural Engine. Prompts to it never leave your device.

Ari acting on pages

Ari can navigate the active tab, open new tabs, click elements, type into form fields, scroll the page, and read extracted page text. When this happens:

• A purple glow appears around the screen and a status pill at the top says what Ari is doing right now. Both stay visible for the entire agent-mode session.
• You can interrupt at any time by tapping the page or the stop button in the chat.
• Page content Ari reads is included in the prompt sent to your selected AI provider so the model can answer. It does not get sent to AriRoam.
• Ari cannot install software, change iOS settings, access other apps, or persist anything beyond the chat history already covered above.

Ad and tracker blocking

AriRoam includes a curated content blocker that drops requests to common ad networks, analytics pipelines, fingerprinting beacons and cookie-consent popup loaders before they load. It's always on; there's no toggle.

This is implemented via Apple's WKContentRuleList — Webkit-native, in-process. AriRoam does not relay your network traffic anywhere.

Permissions AriRoam asks for

AriRoam only requests system permissions when a website you visit needs them. Each prompt is from iOS, not from us:

• Camera — when a website asks (video calls, QR codes, photo uploads).
• Microphone — when a website asks (voice calls, voice search).
• Location — when a website asks for your precise location.
• Photos — when a website asks you to upload an image.

None of these are collected by AriRoam. They go directly between the website and the iOS subsystem that holds them.

Erase everything

In Settings → Manage → Erase all data, AriRoam wipes:

• History, bookmarks, pinned sites, tabs, Spaces, chats, providers and their Keychain entries.
• Every category of WebKit website data — cookies, local storage, IndexedDB, HTTP cache.
• The persisted JSON files in Application Support.

The app returns to a fresh-install state. The welcome sheet reappears on next launch.

Children

AriRoam is not directed at children under 13 and does not knowingly collect information from them. As a browser with unrestricted web access, it is rated 17+.

Changes

If the data picture ever changes — for example if AriRoam ever adds anything resembling telemetry — this page will be updated and the effective date at the top will change. Material changes will also be surfaced inside the app the next time you open it.

Your rights

Since AriRoam doesn't collect personal data, there's nothing on our side to access, export, or delete. To remove everything AriRoam has stored on your device, either tap Erase all data inside the app, or uninstall — iOS handles the rest.