Privacy policy

Apple devices. HOTIANA for iPhone, iPad, Mac, Apple TV, Apple Watch, Apple Vision Pro and CarPlay is in development and not yet available. Its privacy policy will be published on this page before it is released. The policy below is the one published for the HOTIANA Android app on Google Play.

HOTIANA for Android

The short version

Hotiana is your phone's assistant, and it is built to keep what it learns about you on your phone.

It has no account and no sign-in. We run no server that your messages, contacts, calls, notifications or recordings are sent to. There are no adverts, and no analytics or tracking tools of our own in it.

Six things leave your phone. Four happen because you asked: your position, rounded when you ask about a place or for directions; the audio of a sentence you speak if your phone's own speech recogniser cannot answer offline; a message you explicitly send to someone you chose; and the wording of a document you choose to share, only when you share it.

Two happen without you doing anything, and we name them for that reason: diagnostic information sent by the mapping software we use, and a token identifying this installation, given to Google so that a message or call can reach you. Each is described below.

What stays on your phone

All of the following is read and used on the device. None of it is sent to us, because there is nowhere of ours to send it to.

  • Your messages. Hotiana can be your phone's messaging app. It reads and sends your texts on the phone itself.
  • Your calls and call history. Hotiana can be your phone's dialler.
  • Your contacts. Read so it can call and message the people you name. There is one place it writes a contact — the "New contact" panel you fill in yourself — and it asks for permission at the moment you press save, not before.
  • Your calendar. When you ask it to make an event it writes the event and nothing else: the title, the time, the day, the time zone, and a place if you gave one. Nothing identifying Hotiana is attached to it.
  • Your notifications. If you turn the feature on, Hotiana keeps a note of notifications from apps you choose, so you can ask about them. That note is encrypted on the device, holds only today — every read and every write first deletes anything older, so yesterday's is gone the first time it is touched, even if the phone was off at midnight — and you can erase it outright.
  • What you say to the wake word. Listening for the wake word happens entirely on your phone, with a model stored on the device. That part of the app makes no network connection at all.
  • Photographs you take in the Portrait creator. The camera is used only when you tap to take a portrait, and the picture is written to Hotiana's own folder on your phone.
  • Documents you import. Their text is extracted and held in the encrypted vault on the phone, and you can remove a document. It leaves the phone only in the case described below, and only when you choose.
  • Where you parked. If you ask Hotiana to remember where you left your car, it stores that spot on the phone. It is excluded from cloud backup and from phone-to-phone transfer. **It is kept until you park somewhere else or clear the app's data — there is not yet a way to tell Hotiana to forget it, and there should be.** We are fixing that.

What leaves your phone, and exactly what it is

1. Your position, rounded, for places and directions. When you ask where you are, about a place nearby, or for directions, Hotiana sends your position rounded to about eleven metres to Mapbox — enough for the street and the block, not enough for the house or the driveway. Position-based searching sends a bias point rounded to about a kilometre. No other service receives your position; the app on Google Play carries no weather service. Hotiana holds no background-location permission, so Android cannot give it your position while the app is closed.

2. The audio of one spoken sentence, sometimes. Speech is handled by your phone's own speech recogniser, and Hotiana asks it to work offline. If your phone cannot recognise speech offline — for example it has no offline English pack — the phone's recogniser handles it the way it does for any app, which may involve sending that audio to whoever provides it. That is your phone's service, not ours.

3. A message you send. If you ask Hotiana to share where you are, it reads your position fresh at that moment, asks you to confirm, and then puts it in the body of an ordinary text message to the person you named. It goes to that person, by text, from your phone. It does not pass through anything of ours, and neither the coordinate nor the message is kept by us.

4. The wording of a document you share, only when you share it. You can give Hotiana a document - a PDF, for instance. It reads the text out of it and keeps it in the encrypted vault on your phone, so it can answer questions about it and point you at the page. That stays on the phone, and you can remove the document.

If you ask Hotiana something that needs help beyond the phone, it asks you first, and only then does the relevant wording go to the provider that answers it. It is your action each time, and nothing is sent without it. We receive none of it - we have no server - but it does leave your phone, so we declare it.

Identifiers

Hotiana uses Google's Firebase Cloud Messaging so it can be woken for an incoming message or call. Firebase issues a registration token for your installation. Google holds it - that is how the message reaches your phone, and our Data safety declaration reports it as shared with Google. Hotiana itself does not send that token anywhere, does not use it, and does not attach it to anything about you.

There are no advertising identifiers and no advertising or tracking tools in Hotiana, and we add no analytics or crash-reporting of our own.

Crash logs and diagnostics

Hotiana uses Mapbox's mapping software for maps, navigation and place search. That software can send crash logs and diagnostic information about the map to Mapbox when something goes wrong, so our Data safety declaration reports crash logs and diagnostics as collected and shared with Mapbox, for the purpose of keeping the map working. They are not attached to your name or your account, because Hotiana has neither. We add no crash reporting or analytics of our own.

Children

Hotiana is not directed at children.

Deleting your information

There is no account and no server of ours, so there is nothing of yours held elsewhere to delete.

On your phone: uninstalling Hotiana removes it and everything it kept - including the vault and any documents you imported. Before that, you can remove a document, and you can erase the notification note from within the app. The parked-car spot is the exception noted above — there is no way to erase it on its own today.

Contact

hotianaai@gmail.com

Published by the HOTIANA developer account on Google Play for the Hotiana Android app (package net.hotiana.companion). This page was last updated on 23 September 2026 and describes the app as published on Google Play; when the app changes what leaves your phone, this page changes with it.