Privacy First

Local-first privacy, with clear disclosures when data leaves.

LM Manager Pro is built as a local-first app with no analytics, no telemetry, and no account system.

No analytics No trackers Optional feedback only

Summary

LM Manager Pro is a local-first iOS and iPadOS app for managing LM Studio inference servers and cloud AI providers. There are no accounts, no analytics, no third-party crash reporting, and no background telemetry. Your app data is stored locally. Requests to connected servers or selected cloud providers, web searches, and feedback submissions send the relevant content to the services described below.

What we store on your device

  • App data (SwiftData): machine configurations, AI personas, teams, projects, chat sessions and messages, episodes, scoring history, and prompt templates. Stored locally in the iOS sandbox for this app only.
  • API keys (iOS Keychain): if you choose to use cloud providers, your API keys for OpenAI, Anthropic, Google, and Qwen are stored securely in the iOS Keychain. They are used only to make API calls on your behalf and never sent anywhere else.
  • Settings (UserDefaults): non-sensitive preferences such as theme, default sort order, and feature toggles.

What leaves your device

Examples of when the app may make network requests include:

  • Local LM Studio servers: the app connects to machines you explicitly add — over your local network or your Tailscale VPN — to load models and run inference. When you use Tailscale, traffic may cross the public internet and may be relayed through Tailscale DERP servers while a direct connection is negotiated or when no direct or peer-relay path is available. Tailscale says its direct and relayed connection types remain end-to-end encrypted with WireGuard; see its connection type documentation.
  • Cloud AI providers (only when you choose a cloud model): prompts, attached images, and any chat context are sent to the provider you selected. Each provider has its own privacy policy that governs that data: We do not relay, log, store, or proxy these requests — they go directly from your device to the provider's API endpoint.
  • Web search (DuckDuckGo, optional, per persona): if you enable web search for a persona, the app sends the persona's search query to DuckDuckGo.
  • In-app feedback (optional): when you deliberately submit feedback, the app sends the feedback type, title, details, app version, build number, platform, and iOS or iPadOS version to a developer-operated Cloudflare Worker. The Worker creates a persistent public issue in the LM Manager Pro Feedback repository. The form states that submissions become public and warns you not to include API keys, credentials, private hostnames or IP addresses, proprietary prompts, or other sensitive information.

The developer does not receive your prompts, responses, provider keys, chats, generated media, or local app database through the model, media, or search features.

Voice features

Speech-to-text uses Apple's Speech framework and English (U.S.) recognizer. When Apple reports on-device recognition is supported for that recognizer, the app requires it. Otherwise, the request is not restricted to on-device processing, and Apple may process recognition audio through its network service. See Apple's on-device recognition documentation. Text-to-speech uses Apple's AVSpeechSynthesizer.

Analytics, tracking, and ads

None. The app contains no analytics SDKs, no crash reporting, no advertising identifiers, no third-party trackers, and no cookies. The optional feedback relay is used only when you choose to submit feedback; it is not analytics or tracking.

App privacy disclosure

Feedback text is treated as Other User Content. The attached app, build, platform, and operating-system details are treated as Other Diagnostic Data. This data is used for app functionality and customer support, is not linked to an account or advertising profile, and is not used for tracking.

Children's privacy

LM Manager Pro is rated 13+ because it can connect to AI chat and content-generation services. The app does not knowingly collect information from children. Users should not submit personal or sensitive information through public feedback. User-configured cloud providers have their own age requirements and privacy policies.

Your data, your device

You can export your full dataset as JSON for backup or migration to a new device, and import it back with one tap. Deleting the app removes its app-container data, but iOS may preserve Keychain items after uninstall; Apple says this behavior is not specified by Keychain documentation. Before uninstalling, clear LM Manager Pro credentials from Settings by choosing Connections, Open Credential Actions, Credential Reset, then Reset Known Credentials. This clears the credentials managed by that action without deleting app data or model records. See Apple's Keychain uninstall discussion.

Changes to this policy

If this policy ever changes, we'll update the date below and post the new version at this URL. Material changes will also be noted in the app's release notes.

Last updated: October 6, 2026