Privacy policy

Keys stay on the device.

Play Data safety and anyone who asks: no account, no sale of a person, local crypto. Watch lookups happen only when you type an identifier.

Aethelos Command — privacy policy
=================================
This command is a self-sovereign app. There is no account vendor.

What stays on the device
  Signing and agreement keys (ECDSA / ECDH P-256), vault ciphertext,
  bio-lock wraps, recovery phrase wraps, identity matrix hashes,
  watch findings, and Super Agent logs.

What leaves the device (only when you act)
  A Watch sweep sends the identifier you typed to public HTTPS indexes
  (search, Wikipedia, Archive.org, broker site: queries, HIBP catalog).
  Hidden services are refused. Tokens you seal under Sources are stored
  encrypted locally; probes are GET/HEAD to public hosts you named.
  Thinking asks xAI only when you submit a prompt.

What we do not do
  No sign-in. No sale of personal information. No crawl of .onion hosts.
  No deletion of other people's machines. The logic bomb is local only.

Google Play Data safety
  Data collected: none by default. User-initiated network lookups as above.
  Data shared: none sold. Legal notices you dispatch are sent by you.
  Security: encryption at rest under keys you hold.