Twig is designed so that durable personal data lives on your device. We do not operate a hosted agent backend that stores your homes or conversations as a cloud product. Model providers you choose are independent controllers of data you send them.
1. Who we are
The Services are offered by Bhalala Corp. Privacy:privacy@bhalala.org. Product / support:twig@bhalala.org. Legal:legal@bhalala.org.
2. Scope
This policy covers:
- The Twig Android application (package
org.bhalala.twig) - Optional laptop companion software distributed with the project
- This documentation and distribution website (https://twig.bhalala.org)
It does not control the practices of third-party model providers, app stores, device OEMs, speech services, or network carriers.
3. Information on your device
Depending on how you use Twig, the app may store locally:
- Agent configuration (name, personality, model preferences, voice settings)
- Workspace files, notes, skills, macros, scripts, and attachments you create or import
- Conversation transcripts and tool-call records
- Journals, indexes, embeddings, and dream reports derived from the above
- Provider API keys and related secrets in platform secure storage
- App preferences and feature flags
This local data is under your control on the device (and any backups you configure with your platform vendor). We do not receive a live copy of your Twig root by virtue of you running the app.
4. Information you send to third parties
If you configure a model provider (for example OpenRouter, OpenAI, Anthropic, or Google), Twig will transmit prompts, selected context, and any attachments required for a request to that provider so it can generate responses or embeddings. Those transmissions are necessary to provide the AI features you request.
Providers process that information under their own terms and privacy policies, including retention, training, logging, and subprocessors. Review those documents before connecting a key. You are responsible for your contractual relationship and billing with each provider.
Speech recognition, text-to-speech, notifications, and OS services may process audio or text according to your device settings and vendor policies.
5. Website, cookies, and local storage
When you visit https://twig.bhalala.org, standard server or hosting logs may collect IP address, user agent, referrer, and request metadata for security and reliability. We do not use this site to collect the contents of your agents or Twig root.
This site is primarily static documentation and distribution. We may use a cookie or browser local storage so the cookie notice remembers that you already dismissed it, and so we can record a simple preference such as “essentials only.” That preference is not a profile of your shopping habits; it is a “please stop asking” flag. We do not operate an advertising exchange on this domain and we do not sell personal information from this site.
If you email us, we process the contents of your message to respond. If you download binaries or clone source from third-party hosts (for example GitHub), those hosts’ policies apply to that interaction.
6. Permissions (Android)
Twig may request permissions such as:
- Microphone / speech recognition — only for voice features you use
- Internet — model APIs and related network features
- Notifications — optional alerts (for example dream activity)
- Background work — optional consolidation (“dreams”) subject to OS limits
You can deny permissions; related features will degrade or disable.
7. Children’s privacy
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information through the website contact channels, contact us and we will delete what we control.
8. International use
You may use Twig from different countries. Local data stays on your device unless you transmit it to a provider or backup service. Those recipients may process data in other regions under their terms.
9. Retention
Local data remains until you delete it, uninstall the app, or clear app storage, or until your device backups retain copies according to your backup settings. We do not operate a central product database of your agent homes. Website logs and email are retained only as long as needed for the purposes above or as required by law.
10. Your choices
- Do not add a provider key if you do not want model traffic
- Revoke grants, delete agents, and clear workspaces in-product as features allow
- Uninstall the app and clear secure storage / backups as provided by Android
- Disable dreams or voice features
- Contact us about website or email data we hold
11. Security
We design for on-device storage, sandboxed paths, and secure storage for secrets. No method of electronic storage or transmission is perfectly secure. See alsoSecurity. You are responsible for device access control, screen lock, and backup encryption settings.
12. Changes
We may update this policy by posting a new version on this page with a revised effective date. Material changes may also be called out in release notes when practical. Continued use of the Services after an update means you accept the revised policy, to the extent permitted by law.
13. Contact
Privacy questions: privacy@bhalala.org