AI Central — Privacy Policy

AI Central is a client for the Graf AI platform. Unlike a purely local tool, it exists to send your messages somewhere: to assistants that run on servers Graf Clouds operates. This policy says plainly what leaves your phone, where it goes, and who can see it. It does not claim the app keeps your data on your device, because it does not.

1.Who this app is for

AI Central is a business tool. Accounts are created by an administrator for people who already work with Graf Clouds or with an organisation that uses the platform. There is no sign-up in the app, and it is not useful without an account someone has issued to you.

2.What the app sends

• Your username and password, at sign-in, to claw.grafclouds.com over an encrypted connection. The app stores the resulting session token in the iOS Keychain and never stores your password.
• The messages you type, to the assistant you addressed them to.
• Files you attach, which land in that assistant's working directory.
• A device token from Apple, if you allow notifications, so the server can tell you when a reply is ready. It identifies the installation, not you.

That is the complete list. The app contains no analytics, no crash reporting, no advertising identifiers and no third-party SDKs — it is built entirely on Apple's own frameworks. It does not track you across other apps or websites.

3.Where your conversations go

Conversations are stored on Graf Clouds servers, because that is what makes them available on the web console and on your phone at the same time. Your account can only reach the assistants belonging to the organisations it has been granted, and the same restriction applies whether you use the app or the browser.

To produce a reply, the text of your conversation is sent to the AI model provider serving that assistant — today Anthropic, and in some configurations other providers chosen by the administrator. Those providers process the text to generate the response. Assistants can also use tools on your behalf, such as reading a file you uploaded or querying a system your organisation has connected; what an assistant is permitted to reach is set by the administrator, not by the app.

4.The sign-in screen uses Cloudflare Turnstile

The login screen runs a Cloudflare Turnstile check to keep automated systems out. Cloudflare receives the information it needs to decide whether the request is automated. It is not used to profile you, and it runs only on the sign-in screen.

5.How long things are kept

Conversations, uploaded files and the outputs assistants produce are retained for as long as the account exists, so that history stays useful. Files an assistant works with are also copied to Graf Clouds object storage so they survive the assistant being rebuilt. Your notification device token is deleted when you sign out, and Apple's servers tell us to drop it when the app is uninstalled.

6.Asking for your data or its deletion

Write to [email protected] and we will provide a copy of what is held for your account, or delete it. If your account was issued by an organisation you work with, tell us and we will coordinate with their administrator, because the conversations may be that organisation's records rather than yours alone.

7.Children

AI Central is not directed at children and accounts are not issued to them.

8.Changes

If this policy changes in a way that affects what is sent or how long it is kept, the date at the top of this page changes with it.

9.Contact

Graf Clouds — [email protected]