Your information.
Your choices.

Who is responsible

Schwaizer is responsible for the app processing described in this notice. For privacy questions or requests about your information, contact info@schwaizer.ch.

Pairing and session information

You pair by scanning a QR code or entering a pairing code and approving the connection on the website. The phone does not complete pairing on its own. The app does not require a separate Companion account for this process, although the paired service can have its own account requirements.

The paired site's hub carries the session. It receives information needed to establish and maintain the connection, including a device identity specific to that site's origin, session credentials and turn information. Network requests also reveal technical connection information such as your IP address to the service receiving them.

Who answers and what the site sees

With Workspace answering, the paired site's hub answers your question. With This phone, a downloaded model answers on the device. With a configured provider, the phone sends the request using your key to OpenAI, Anthropic or xAI. A model running on the phone does not by itself stop transcript sharing.

Show on the site is the default transcript setting. It sends your question and the answer through the hub so the website can display them. The hub can read that content.

Keep on this phone withholds the question and answer transcript. The site still receives turn boundaries and the name of the answering provider and model. If you ask the site to perform an action, such as a booking or account lookup, the request and necessary tool inputs still go to that site.

The Private preset selects downloaded on-device answering and voice models and keeps the transcript on the phone. Models must be downloaded first. The site-tool requests and session information described above still leave the phone; Private is not a promise that no connection or information leaves the device.

Microphone, camera and spoken answers

Speech recognition uses a model on the device. If the required model or language is unavailable, you can type instead; Companion does not silently switch recognition to a cloud transcription service. Hands-free conversation reopens the microphone after an answer. You can change that setting and revoke microphone permission in your operating system.

Camera access is used to scan a pairing QR code. You can use the supported code-entry flow instead.

The selected voice determines how answer text is spoken. ElevenLabs receives the answer text when its voice is used with your key, including when the answer itself was generated on the phone. HAL voice sends the text to the voice server you configure. A downloaded local voice runs on-device. System voice hands the text to your operating system's speech engine, which may process it on-device or over a network. If a selected voice is unavailable, the app can use system voice and shows which voice spoke.

Information stored on your device

Companion uses the operating system's protected storage for settings, provider keys, a configured HAL voice token, its device identity and a saved session credential used to resume a connection. Downloaded speech, voice and answering models occupy separate app storage.

Disconnecting ends the session and requests removal of its saved credential. It deliberately keeps the device identity so a later pairing can present the same origin-specific identity. Disconnecting does not erase configured keys, preferences, downloaded models or records already held by a paired site.

You can remove keys through Settings and remove supported model downloads. Recent local diagnostic logs can be cleared, copied or shared from the app. Sharing a log is a separate action using the operating system. Removing an app is not a guaranteed way to erase every protected-storage item, especially where the operating system retains Keychain data.

Optional error reports

Error reporting is off unless you turn it on. When enabled in a build configured for reporting, Sentry receives filtered JavaScript error reports. They contain error categories, app and device versions, recent app event codes and bounded measurements such as timings and counts. Request addresses, raw log messages, provider keys, questions and answers are excluded.

Turning reporting off stops new reports and discards pending reports under that consent. It cannot recall reports already received. This choice does not enable automatic native crash reporting, session tracking, performance profiling, replay or attachment uploads. Companion does not initialise PostHog product analytics.

Paired services, providers and retention

Information you send to a paired site, its tools or a configured AI or voice provider is processed under that service's terms and your account settings. Model downloads also contact their host. A service may process information outside your country. The processing and retention rules can differ between API products, account types and provider settings.

Companion does not control how long an independent workspace keeps a mirrored conversation or tool result. Keeping a later turn on the phone, disconnecting or removing a provider key does not erase an earlier request already received elsewhere. Request removal of those records from the relevant site or provider. We do not set a single retention period for those independent services.

• OpenAI API data controls
• Anthropic commercial terms
• xAI API and enterprise information
• ElevenLabs privacy policy

Your choices

You can change answering and transcript settings, choose a different voice, disable optional error reports, remove configured keys, disconnect from a site and change operating-system permissions. These controls affect future processing and do not reverse actions already completed by another service.

For records held by a paired website or workspace, contact its operator. Schwaizer's privacy contact can help with questions about Companion and information handled by Schwaizer, including optional error reports.

Visiting this privacy page

This page uses no analytics, tracking cookies, forms, external fonts or third-party scripts. Its app icon and stylesheet are served with the page.

AWS Amplify hosts the static site in the Ireland region and delivers it through a global content delivery network. Serving and protecting the page involves ordinary connection information such as your IP address, requested URL, browser information and request time. Hosting and security providers can process this information where their infrastructure operates, including outside Switzerland. It is separate from the information you enter in the app.

• AWS privacy notice

Questions and privacy requests

Contact info@schwaizer.ch to ask about this notice or request access, correction or deletion of information under our control. Include the app name and enough information to locate the relevant account or record. Do not send passwords, API keys or unrelated sensitive information.

We may ask for proportionate information to verify that a request concerns your data. Rights and available remedies depend on the applicable law. You can also raise a concern with the relevant data protection authority, including the Swiss Federal Data Protection and Information Commissioner.

This notice is updated when the app’s data handling changes. The date at the top identifies this version.

• Swiss data protection authority