# PoolParty Privacy Notice: the app and our services

**Public beta · version `beta-1` · last updated 2026-10-01**

This notice covers the PoolParty software and the online services we run for it. The website has its
own short page, at [poolpartyai.com/privacy](https://poolpartyai.com/privacy/): it collects nothing.
PoolParty Labs LLC, a Colorado limited liability company ("we", "us", "our") is responsible for the
personal data described here.

## The short version

- **PoolParty runs on your machines.** Your prompts, answers, files, models and pool data stay in
  your pool, or in the pool you ask, unless you connect a service that sends them elsewhere. We do
  not receive them.
- **No account is needed**, and the app has no analytics, advertising or tracking.
- **Two things reach us today:** requests for signed documents from our download service (update
  information, the signed stop, and on a machine holding a hub the model list), which carry nothing
  about your device and which we do not log; and email you send us. Diagnostics reports will be a
  third once that service opens: off by default, sent only after you have read a report and clicked
  Send, and deleted within 90 days.
- **Downloading a model contacts its host directly**, not us.
- **On your local network, your machines announce themselves** so that they can find one another.
- **We do not sell or share personal data, and we do not train AI on your content.**

## 1. What stays on your machines

PoolParty keeps these on your own devices and does not send them to us:

- your prompts, answers and jobs;
- your files, sealed or not, and your recovery codes;
- the models you download;
- your pool's membership, device names, credentials and keys, held in your system's keychain or
  credential store where it has one;
- PoolParty's activity records and logs, and your consent settings, except inside a diagnostics
  report you choose to send (section 2);
- your acceptance of our terms.

Your pool's hub runs on one of your own machines. By default it keeps a finished run's prompt and
answer for 90 days after the run ends, and the pool's owner can change that period. Deletion runs
when the hub starts and periodically while it runs; a backlog may take several passes. Unfinished
runs have no end clock. If several runs share a prompt, it stays until the last run that needs it
has been forgotten or expired. Partial answers are removed after a run ends. The hub keeps run
metadata and its record of who changed what in the pool for as long as the pool exists.

## 2. What leaves your machines, and where it goes

### On your local network

Your devices talk to each other directly, over connections PoolParty encrypts. While sharing with
your other computers is on, each machine announces itself on the local network it is connected to,
for as long as it runs, with a PoolParty identifier that stays the same from network to network and
its local addresses; anyone on that network can see the announcement, including on public Wi-Fi.
While you show six digits to add a device nearby, your machine also announces, for up to ten
minutes, that a join is open. A machine that holds a pool's hub accepts connections from your local
network, and on Windows the installer adds firewall rules that allow them.

### Away from home

If you turn on away access, your devices connect across the internet directly where they can, and
otherwise through a relay your pool's owner runs, which passes on encrypted traffic it cannot read.

### Other people's pools

If you join someone else's pool, its hub receives what your device sends it: your device's name, its
capacity and availability readings, the work you run through it, and any request that is not sealed.
If other people join your pool, your hub receives the same from their devices.

### Update checks, to us

PoolParty asks our download service for signed documents: update information about every six hours
on macOS, Windows and Linux, unless you turn checks off in Updates; the signed stop, which lets us
pause PoolParty's background agent on versions with a serious fault, about every five minutes; and,
on a machine that holds its pool's hub, the list of models the pool can offer, about every ten
minutes. The last two are read whatever Updates says. No request says anything about your device;
like any internet request, it carries your network (IP) address. Our download service does not log
requests, and it counts completed downloads, never who made them. Our traffic passes through
Cloudflare, which handles connection data under its own privacy policy. Check now still works when
you click it, even with checks off.

Downloading PoolParty from our website, and pressing Join The Public Pool, which fetches its join
document from the same service, work the same way.

### Models

When you install a model from PoolParty's catalog, your machine downloads it directly from Hugging
Face, where every model in the catalog is hosted today. Hugging Face sees your network address and
which file you fetched, under its own privacy policy. Engines you connect, such as LM Studio or
Ollama, download their own models under their own terms.

### Diagnostics, to us, only if you choose

Sending diagnostics is not available yet: the service that receives reports is not open, and the app
says so. Here is how it works once it opens.

Diagnostics are off by default. If you turn them on, PoolParty keeps a local record and shows you
exactly what a report contains before anything is sent, and it sends a report only when you click
Send.

A report contains PoolParty's version and build, your operating system and chip family, PoolParty's
status words, your consent settings, the names, codes, counts and times of its last 32 events, and,
after a crash, the kind of failure and the source file and line. It never contains a prompt, a file,
a key, a credential, a path, a hostname, a URL, or any identifier of you, your pool or your devices.
We also see your network address, because your machine connected to us.

We keep each report for at most 90 days and delete it sooner when we no longer need it. The
receiving service removes expired report bodies at startup, before accepting reports and every six
hours while running; it may delete them early. If deletion fails, it reports the failure and refuses
new reports until cleanup succeeds. Delivery records contain report identifiers, digests, sizes and
times, not the report body or your network address. Those records can outlive the report.

### Email, to us

If you write to hello@poolpartyai.com, we have your message and your address. An automated assistant
built on Anthropic's Claude reads the mailbox first: it answers questions the website already
answers, says so in every reply it writes, and passes everything else to a person. Our mailbox is
hosted by AgentMail, so mail passes through AgentMail and Anthropic on its way to us. Legal notices,
deletion and privacy requests, security reports and copyright complaints always go to a person.

### Services you connect

If you connect PoolParty to other services, such as AI engines like LM Studio or Ollama, models
hosted in the cloud, AI apps that use your pool's tools, game-streaming apps, or anything else, what
you send goes to them under their own terms. Some engines offer cloud models that send your prompts
off your machines; PoolParty does not detect these yet, so check an engine's models before you let
your pool use them.

## 3. Services that are not open yet

The diagnostics service, The Public Pool, the PoolParty account, joining devices from outside your
home network through our servers, relays for rooms and away access, and connecting AI apps to your
pool through our servers are not open yet. Before each one opens, this notice will say what it
receives, why, and how long it is kept.

## 4. What we never do

- No advertising, analytics or tracking, in the app or on the website.
- We do not sell personal data, or share it for advertising.
- We do not use your content to train AI models.
- You never need an account to use PoolParty.

## 5. Why we use personal data

Where the law asks for a reason (a "legal basis"), ours are:

- **update checks and downloads**: to deliver and secure the software you asked for (performing our
  agreement with you, and our legitimate interest in keeping it secure);
- **diagnostics**: your consent, which you withdraw by turning diagnostics off;
- **email**: to answer you (our legitimate interest in answering, and performing our agreement where
  it applies).

## 6. How long we keep it

| Data                         | How long we keep it                                                                 |
| ---------------------------- | ----------------------------------------------------------------------------------- |
| Update checks and downloads  | Not logged by our download service; Cloudflare's own policy applies to its handling |
| Diagnostics reports          | At most 90 days                                                                     |
| Email                        | Until you ask us to delete it, or we no longer need it to answer you                |
| Your acceptance of our terms | Only on your device                                                                 |

## 7. Your choices and rights

- You can turn update checks off, keep diagnostics off, turn sharing with your other computers off,
  or uninstall PoolParty at any time.
- To see, correct or delete personal data we hold about you, write to hello@poolpartyai.com from the
  address concerned. For a diagnostics report, quote its report ID, which the app shows, because
  reports carry nothing else that identifies you.
- Depending on where you live, including the European Economic Area, the United Kingdom, California,
  Colorado and other US states, you may have rights to access, correct, delete or move your personal
  data, to object to or restrict how it is used, and to complain to a data-protection authority. We
  will not treat you differently for using them.
- We do not sell or share personal information, as California law defines those words.

## 8. Security

PoolParty encrypts the connections it makes between your devices and to our services, and it
encrypts sealed files on your device before they leave it. PoolParty is beta software and has not
had an independent security audit. Please report security problems to hello@poolpartyai.com.

## 9. Where data is handled

Our services run in the United States, and Cloudflare's network handles traffic in many countries.
If you are outside the United States, data described here may be handled in the United States and in
other countries.

## 10. Children

PoolParty is not for anyone under 18. We do not knowingly collect personal data from children. If
you believe a child has sent us personal data, write to us and we will delete it.

## 11. Changes to this notice

We update this notice before any new collection starts, with a new version name and date. When a
change matters, PoolParty shows it to you.

## Contact

PoolParty Labs LLC, a Colorado limited liability company · hello@poolpartyai.com · poolpartyai.com