Privacy Policy

Effective Date: 2026-05-27 Last Updated: 2026-05-27 Version: v0.1 (draft)

Plain-language summary

Chelae is an iOS app from Plausible Industries LLC that lets you talk to your own self-hosted OpenClaw AI assistant on a computer in your home. Your voice (as text after transcription) travels through our cloud routing layer to your home machine. We do not sell your information. We are working toward end-to-end encryption between your iPhone and your home server, but the current version is not end-to-end encrypted — our cloud routers technically have the ability to read message content in transit, although we do not log it. We are honest about this, and we will update this Policy when end-to-end encryption ships.

1. Who we are and how to contact us

Chelae is operated by Plausible Industries LLC, a California limited liability company ("Plausible Industries," "we," "us," or "our").

Mailing address: Plausible Industries LLC 2108 N St Ste N Sacramento, CA 95816

Email for privacy inquiries: privacy@chelae.net Email for general support: support@chelae.net

This Privacy Policy ("Policy") applies to the Chelae iOS application, the Chelae website at chelae.net, and any related services and features (collectively, the "Service"). It is part of the Chelae Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service.

2. What Chelae is and what it isn't

Chelae is a voice relay for OpenClaw, an open-source self-hosted AI assistant. Chelae has three pieces:

1. The Chelae iOS app, which runs on your iPhone or iPad
2. The ClawTalk routing layer, which runs in our cloud (AWS) and establishes a session between your iOS device and your home server
3. The OpenClaw channel plugin, which you install on your own computer at home alongside OpenClaw

OpenClaw is a third-party, open-source product not developed or operated by Plausible Industries. Your OpenClaw home server runs on infrastructure you own and control. Plausible Industries does not host your OpenClaw server.

This Policy describes what Plausible Industries does with your information. It does not describe what OpenClaw or any other third party does with your information; for that, see their respective privacy practices.

3. Scope

This Policy applies to:

• Individuals who download and use the Chelae iOS app
• Visitors to chelae.net
• Anyone who contacts us in connection with the Service

Chelae is available only to residents of the United States and is intended solely for individuals 18 years of age and older. See Section 10. (We expect to expand internationally in the future; this Policy will be updated before any such expansion.)

4. What information we collect

4.1 Information you provide directly

• Account information — name, email address, password (hashed), authentication credentials
• Device pairing information — public identifiers and tokens used to pair your iOS app with your home OpenClaw server
• Communications with us — messages, support requests, feedback

4.2 Information generated through your use of the Service

• Voice input — audio captured through your device microphone during a Chelae session
• Transcripts — text generated from your voice input via speech-to-text processing
• Message text — the textual content of what you say to your OpenClaw assistant and what it replies
• Session metadata — connection timestamps, session durations, routing assignments, packet and bandwidth counters used to operate and scale the routing layer

In the current version of the Service (v1), Chelae's routing layer transmits transcribed text (not raw audio) between your iOS device and your home OpenClaw server. Voice-to-text conversion happens on your iOS device using Apple's on-device speech recognition or, where on-device recognition is unavailable, through a cloud transcription service we designate.

4.3 Information from iOS integrations

If you grant permission, Chelae may access the following on your iOS device. Each integration is opt-in via the standard iOS permission prompt; you may decline any of them, and Chelae will function with reduced capability.

• Microphone — for voice input. Required for Chelae's core function
• Speech recognition — for on-device transcription. Required for Chelae's core function
• Location — only when you ask a question that benefits from location context (e.g., "what's the weather here?"). Location is used in real time and sent to your home OpenClaw server as part of the question; we do not store location history on our servers
• iOS Reminders — to enable OpenClaw to read or create reminders on your behalf when you ask. Reminders content is transmitted to your home OpenClaw server as part of the request, not stored on our servers
• HomeKit — to enable OpenClaw to read or control HomeKit-enabled devices when you ask. HomeKit state is transmitted as part of the request, not stored on our servers
• HealthKit (future feature, not in v1) — to enable OpenClaw to reference your activity data when you ask. HealthKit data, when this feature ships, will be transmitted as part of the request and not stored on our servers

You may withdraw any of these permissions at any time in iOS Settings → Privacy.

4.4 Information collected automatically

• Device information — device model, OS version, language, time zone, unique device identifiers
• App and Service usage data — features used, sessions initiated, duration, error and crash reports, performance metrics, latency measurements
• Log data — IP addresses, access times, request and routing metadata
• Cookies and similar technologies (on chelae.net) — see Section 8

4.5 Information from your OpenClaw home server

Your OpenClaw home server connects to our ClawTalk routing layer to participate in sessions with your iOS app. From your home server, we receive:

• Authentication tokens
• Channel-plugin identifying information (version, configuration)
• Session messages (text payloads as described in Section 4.2)
• Connection diagnostics

We do not receive the broader contents of your OpenClaw home server, the models it runs, or other data on the machine on which OpenClaw runs.

5. Important: end-to-end encryption status

5.1 Where we are today (Chelae v1)

Chelae v1 uses standard Transport Layer Security (TLS) to encrypt message data in transit between your iOS device and our cloud routing layer, and between our routing layer and your home OpenClaw server. Message content is encrypted on the wire.

However, the current version is not end-to-end encrypted between your iOS device and your home OpenClaw server. Our cloud routing layer technically has the ability to read message content as it relays messages between the two endpoints.

5.2 What we do not do

Although the routing layer technically has the ability to read message content, we do not:

• Log the content of your messages
• Persistently store the content of your messages on our servers beyond the brief duration needed to relay them
• Read your messages for advertising, training, or any purpose other than relaying them to their destination

5.3 Where we are going (E2E encryption roadmap)

We are working toward end-to-end encryption between your iOS device and your home OpenClaw server, so that our routing layer relays only ciphertext and cannot read message content even in principle. When end-to-end encryption ships, this Section will be updated to describe the new architecture and we will notify users.

We make this disclosure because we believe users deserve an accurate picture of how their data flows today, not a future-promise of a feature that has not yet shipped.

6. How we use information

By creating a Chelae account, you authorize Plausible Industries to use the information described in Section 4 for the purposes set out below. This authorization is a condition of the Service.

We use information to:

1. Provide the Service. Operate the Chelae iOS app, the ClawTalk routing layer, and the channel-plugin endpoint that connects to your OpenClaw home server
2. Establish and maintain sessions. Pair your iOS app with your home server, route messages, manage reconnections and failover, scale the routing infrastructure
3. Process voice input. Transcribe your voice input to text using on-device speech recognition or, where unavailable, a cloud transcription service
4. Relay messages. Transmit transcribed text between your iOS app and your home OpenClaw server
5. Provide account and authentication functions. Verify your identity, manage device pairing, deliver account-related notifications
6. Monitor and improve the Service. Investigate errors and outages, conduct quality assurance, analyze performance, evaluate routing efficiency, and develop new features (including the E2E encryption rollout)
7. Train and improve our infrastructure. Use de-identified routing and session metadata to improve routing assignment and latency. We do not train on the content of your messages
8. Protect the Service and our users. Detect and prevent abuse, fraud, security incidents, and violations of our Terms of Service
9. Comply with law. Respond to lawful requests and comply with applicable legal obligations
10. Communicate with you. Send transactional messages and, if you have opted in, informational or promotional communications
11. Operate, evolve, and expand the Service. We may add features, new integrations, new channels, or other capabilities consistent with the Service's purpose. We will not introduce a fundamentally new category of processing (for example, training third-party models on your message content) without additional notice and, where required, additional consent

7. Disclosure of information to others

7.1 To service providers and subprocessors

We rely on third-party service providers to operate parts of the Service. The following are used as of the Effective Date:

We update this list as our subprocessor relationships change. The current list is maintained at chelae.net/subprocessors.

7.2 To your OpenClaw home server

Chelae's whole purpose is to deliver messages to your home OpenClaw server. By using Chelae, you are directing us to do so. Your OpenClaw home server is infrastructure you own and control; once data reaches it, it is on your machine, not ours.

7.3 In connection with a business transaction

If Plausible Industries undergoes a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, your information may be disclosed to the counterparty. We will require the counterparty to honor the commitments in this Policy and will provide notice of any material change.

7.4 To comply with law and protect rights

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service
• Protect the rights, property, or safety of Plausible Industries, our users, or others
• Detect, prevent, or address fraud, security, or technical issues

When permitted by law, we will provide reasonable notice to affected users before responding to legal requests.

7.5 We do not sell or share your information for advertising

We do not sell your personal information. We do not "share" your personal information for cross-context behavioral advertising as those terms are defined under the CCPA. Chelae is not an advertising-supported service.

8. Cookies and web technologies

When you visit chelae.net:

• We use strictly necessary cookies to operate the site (session, authentication, CSRF protection)
• We use analytics cookies (Google Analytics 4, configured with IP anonymization, 14-month retention, no advertising features, and no cross-site tracking). You may opt out by enabling Global Privacy Control (GPC) in your browser
• We honor Global Privacy Control (GPC) browser signals as a request to opt out of "sale" and "sharing" under the CCPA

We do not use cookies for advertising and do not allow third-party ad networks to set cookies on chelae.net.

For more detail, see the Cookie Policy.

9. Retention

9.1 Retention while your account is active

We retain account information and device-pairing information for as long as your Chelae account is active.

We retain session metadata (timestamps, routing data, performance counters) for up to 90 days for operational and quality-of-service purposes.

We do not persistently store message content on our servers. Messages are relayed and then dropped from memory.

9.2 Retention after account deletion

When you delete your account, we delete account and device-pairing information within 30 days, subject to:

• Backups: residual copies may persist in encrypted backups for up to 90 days, then overwritten
• Records required by law (transaction and tax records)
• Anonymized data
• Information needed to enforce our rights

10. Children

Chelae is intended for individuals 18 years of age and older. We do not knowingly collect information from individuals under 18. If you believe we have collected information from someone under 18, please contact privacy@chelae.net and we will delete it.

11. Your rights under California law

If you are a California resident, you have the following rights under the CCPA, which we honor for all U.S. users:

• Right to know what personal information we have collected and how we use it
• Right to delete personal information we have collected from you, subject to legal exceptions
• Right to correct inaccurate personal information
• Right to limit the use of Sensitive Personal Information (voice recordings are sensitive personal information; by using Chelae, you authorize their use for the purposes in Section 6; you may withdraw this authorization at any time, but doing so makes the Service unable to function)
• Right to opt out of sale or sharing (we do not sell or share)
• Right to non-discrimination

To exercise these rights, contact privacy@chelae.net (subject line: "CCPA Request"). We will verify your identity and respond within 45 days.

You may designate an authorized agent to make requests on your behalf, subject to verification of the agent's authority.

12. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including:

• TLS encryption of data in transit between iOS app, routing layer, and home server
• Encryption at rest of stored account information
• Access controls limiting personnel access to your information to those with a business need
• Audit logging of administrative access
• Regular security reviews and dependency monitoring

No security measure is perfect. We cannot guarantee that your information will never be accessed by unauthorized parties. We will notify you of a security incident affecting your information as required by applicable law.

13. International users

Chelae is operated from the United States and is currently intended for U.S. residents only. We may expand internationally in the future; when we do, this Policy will be updated to describe the additional protections that apply to international users.

If you reside in the European Union, the United Kingdom, the European Economic Area, or another jurisdiction with comprehensive data protection laws, please do not create a Chelae account at this time.

14. OpenClaw and third-party services

Chelae is a channel plugin for OpenClaw. OpenClaw is open-source software released by a third party not affiliated with Plausible Industries. OpenClaw runs on your computer; its handling of your information is governed by its own license, documentation, and configuration, not by this Policy.

Other third-party services with which Chelae may interoperate (such as services your OpenClaw assistant calls to answer your questions) have their own privacy practices. We have no control over those third parties.

15. Changes to this Policy

We may update this Policy from time to time, including when E2E encryption ships. When we make a material change:

• We will update the "Last Updated" date
• We will notify users by email and in-app notice at least 30 days before the change takes effect
• If the change requires additional consent, we will obtain it

We maintain prior versions at chelae.net/privacy/history.

16. Contact

Email: privacy@chelae.net Mail: Plausible Industries LLC, Attn: Privacy, 2108 N St Ste N, Sacramento, CA 95816

End of Privacy Policy.