Skip to Content

Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains what personal data LlamaRun collects, why we collect it, and the choices you have. LlamaRun is operated by Krish Baidya, based in India, who is the data fiduciary (controller) for the data described here.

The short version

  • Chats with local models (for example through Ollama) stay on your device. We never see them.
  • Prompts you send to cloud models pass through our servers to Google or OpenAI to generate a reply. We do not store the content of those prompts or replies.
  • We keep only what we need to run your account: your Google profile basics, your plan and your monthly usage count.
  • Payments are handled by Razorpay. We never see or store your full card, UPI or bank details.
  • We do not sell your personal data.

1. Data we collect

Account data

When you sign in with Google (via Firebase Authentication) we receive your name, email address, profile photo URL and a unique user ID.

Plan and usage data

We store your plan (Free or Pro), subscription status, Razorpay subscription ID, the end of your current billing period, and a count of cloud messages used in the current period. This is stored in Google Cloud Firestore.

Prompts sent to cloud models

When you choose a cloud model, the text of your request (and any tool definitions the app attaches) is sent through our server to the selected provider, Google (Gemini) or OpenAI, and the reply is streamed back to you. We process this content only to deliver the reply; we do not keep a copy of the conversation on our servers. The providers process it under their own API terms and privacy policies.

Payment data

When you subscribe, Razorpay collects your payment details directly. We receive payment and subscription identifiers, status, amount and dates from Razorpay so we can activate and manage your plan.

Analytics and diagnostics

We use PostHog and Google Analytics / Google Tag Manager to understand how the website and app are used (for example page views, feature usage, which model was used, and errors). These tools may use cookies or similar identifiers and collect device, browser and approximate location information.

Communications

If you email us, we keep the correspondence so we can help you.

2. How we use your data

  • to sign you in and provide the Service, including cloud model responses;
  • to enforce plan limits and manage subscriptions and billing;
  • to provide support and respond to your requests;
  • to keep the Service secure and prevent abuse or fraud;
  • to understand usage and improve the app and website;
  • to comply with legal, tax and accounting obligations.

We rely on your consent (given when you sign in and use the Service), the performance of our contract with you, and our legitimate uses permitted under applicable Indian law, including the Digital Personal Data Protection Act, 2023.

3. Who we share data with

We share data only with service providers that help us run LlamaRun:

  • Google Firebase / Google Cloud — authentication and database hosting;
  • Google (Gemini API) and OpenAI — generating cloud model replies;
  • Razorpay — payment processing and subscriptions;
  • PostHog and Google Analytics — product analytics;
  • Vercel — website and API hosting.

Some of these providers process data outside India. We may also disclose data if required by law or to protect our rights, users or the public.

4. How long we keep data

We keep account, plan and usage data while your account is active. Payment records are kept for as long as required by Indian tax and accounting law. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it by law.

5. Security

We use industry-standard measures including encrypted connections (HTTPS), signed access tokens and restricted access to our databases. No method of transmission or storage is completely secure, but we work to protect your data and will notify you of a breach where required by law.

6. Your rights and choices

Subject to applicable law, you can:

  • access the personal data we hold about you and request a summary of how it is processed;
  • ask us to correct or update inaccurate data;
  • ask us to delete your account and personal data;
  • withdraw consent at any time (this may stop parts of the Service from working);
  • nominate another person to exercise your rights in case of death or incapacity;
  • raise a grievance with us, and if unresolved, with the Data Protection Board of India.

You can also block or delete cookies in your browser, and you can use LlamaRun with local models only without sending prompts to any cloud provider.

7. Children

The Service is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, notify you in the app or by email.

9. Contact and grievance officer

For privacy questions, data requests or grievances, contact our grievance officer, Krish Baidya, at support@krishbaidya.me. We aim to respond within 30 days. See also our Contact page.