Privacy
Last updated 5 November 2026
Robin has no accounts, no telemetry and no analytics. The only cookies this website sets are the chat's, and all we keep about the people who visit it is the chats they start.
This website
getrobin.app is a set of static pages served by Cloudflare. There are no analytics and no advertising, and the pages load nothing from anywhere but this site, except that Pricing asks our licence service how many launch licences are left, Buy asks it to open a checkout, and the chat loads from Crisp. Neither request to Joydle carries anything about you.
The chat is Crisp's, and it sets cookies that keep your conversation. Crisp sees your IP address, your browser and the page you're on, and what you write, along with any email address you give, goes to Crisp and to us, under Crisp's privacy policy.
Like any web host, Cloudflare sees the IP address and browser details of each request in order to deliver the page and protect the site from attacks, under its own privacy policy. We have not switched on request logging or visitor analytics, so we do not have a record of who visited.
The Robin app
Nothing about you is sent to us by the app: not your prompts, not your files, not your usage, not your API keys, not a count of how often you open it. The only things it fetches from us are two files we publish for everyone, the update feed and the Discover feed, as ordinary requests that carry nothing of yours, and we keep no logs of them.
The app does talk to the internet, but only to services you chose: the model provider whose key you entered, a generation service when you ask for an image or a voice, an MCP server you connected, a web search when you asked for one, and the licence merchant when you activate your key. Beyond those, it checks our update feed for new versions, reads the Discover feed when you open Discover, and downloads a component the first time a feature needs it. That is the whole list, and it is spelled out below.
What the app sends, and to whom
Model providers
These receive your prompt and whatever context you attached — the conversation, selected text, files or screenshots you added, and tool results — only when you send a message to a model from that provider, with your own key.
| Host | What it is | What is sent | When |
|---|---|---|---|
api.anthropic.com | Anthropic (Claude) | Your prompt, conversation context, attached files and images, tool definitions and results; your Anthropic API key | When you send a message to a Claude model |
api.openai.com | OpenAI | The same, with your OpenAI key; also audio you record, if you use dictation or speech | When you send a message to an OpenAI model, or use OpenAI speech |
generativelanguage.googleapis.com | Google Gemini | The same, with your Gemini key. Larger attachments go to the Gemini files endpoint first | When you send a message to a Gemini model |
openrouter.ai | OpenRouter | Your prompt and context, with your OpenRouter key; OpenRouter forwards it to the model you picked | When you send a message through OpenRouter |
| An address you enter | Any OpenAI-compatible server | The same as above | When you send a message to that server |
If you enter a custom address for a provider, Robin sends to the address you typed; it is up to you to know what is at the other end.
Generation and media services
Used only when you ask for something to be made, each with the key you entered for that service.
| Host | What it is | What is sent | When |
|---|---|---|---|
fal.run, queue.fal.run | fal.ai — images, video, audio, upscaling, background removal | Your prompt and any source image; your fal key | When a generation, upscale or background removal routes to fal |
api.elevenlabs.io | ElevenLabs — speech and sound | The text to be spoken, or audio you supplied; your key | When you ask for speech or a sound effect |
api.dev.runwayml.com | Runway — video | Your prompt and any source image; your key | When you ask for a Runway video |
api.lumalabs.ai | Luma Dream Machine — video | Your prompt and any source image; your key | When you ask for a Luma video |
MCP servers you connect
Which ones, and whether any at all, is your choice. A connected server receives the tool calls the assistant makes and their arguments, and may hold its own data about you under its own policy. Sign-in is between you and that service; the token is kept in your Keychain and never comes to us.
| Host | What it is | When |
|---|---|---|
mcp.slack.com | Slack | Only if you connect it and the assistant uses it |
mcp.notion.com | Notion | Only if you connect it and the assistant uses it |
mcp.linear.app | Linear | Only if you connect it and the assistant uses it |
mcp.sentry.dev | Sentry | Only if you connect it and the assistant uses it |
api.githubcopilot.com | GitHub, with your GitHub token | Only if you connect it and the assistant uses it |
| Any server you add | Yours, or a third party’s | Only when you connect it and it is used |
Everything else the app reaches
| Host | What it is | What is sent | When |
|---|---|---|---|
html.duckduckgo.com | Web search | Your search query and nothing else | When the assistant searches the web for you |
| A page you asked it to read | That site | An ordinary request for the page | When it fetches a URL you gave it, or one from search results |
api.github.com | GitHub’s public API | The repository and path of a skill you are installing | When you install a skill from GitHub |
registry.npmjs.org | The npm registry: the package of Robin’s engine (OpenCode, open source), as its makers publish it | An ordinary download request, with nothing of yours | Once, the first time agent work needs Robin’s engine and this Mac has no copy |
github.com and the GitHub download host it sends to | The earlier release of Robin’s engine (OpenCode 1, open source) | An ordinary download request, with nothing of yours | Only if Robin’s engine is set back to its earlier release, once, when this Mac has no copy of it |
dl.getrobin.app | Robin’s update feed and downloads, from us | An ordinary request for the feed, with Robin’s version in it and nothing of yours | When Robin checks for a new version, and when you download an update |
getrobin.app | The Discover feed, from us | An ordinary request for the feed, with nothing of yours | When you open Discover |
api.dicebear.com | Avatars for Discover | The public username of a post’s author who has no picture of their own; never yours | When Discover shows such a post |
huggingface.co | The open-source eraser model for pictures (about 196 MB) | An ordinary download request, with nothing of yours | Once, the first time you use the eraser on this Mac |
| Our licence service | Robin’s licences, from us | Your licence key, an identifier for this Mac and a few basic details, such as its name and Robin’s version; nothing about what you do in the app | When you activate or deactivate, and now and then to keep the licence current |
The identifier is used only so the licence service can count your Macs. It is not tied to anything you do.
Links to documentation and “get your key here” pages open in your browser only when you click them; they carry no data. When a model, an MCP server or an engine runs on your own Mac (localhost), nothing leaves the machine. Run everything locally and the app makes no outbound requests at all beyond licence and update checks.
Crash reports
Robin does not collect crash reports. If a crash reporter is offered in a future release, it will be off until you turn it on, and will say plainly what a report contains.
What the app keeps on your Mac
~/Library/Application Support/Robin/— conversation and run history, the activity log, boards, what was made, and installed skills. An ordinary folder you can open, back up or delete.- The macOS Keychain — your API keys and any tokens for connected services, protected by your login.
- Preferences — which model you chose, your hotkey, window state. Settings, not content.
- Answer history — the panel’s finished answers, kept for 1, 7, 30 or 90 days, as you choose, or not at all. Older ones are removed automatically.
None of it is synced or uploaded anywhere unless you run your own backup. To remove all of it, quit Robin and delete that folder; revoke keys at your provider’s dashboard at any time.
Your rights
We hold nothing about you from this website. For anything you have sent us, such as an email, you can ask what we have, have it corrected, or have it deleted. Depending on where you live, you may also complain to your data protection authority. We would rather you wrote to us first.
Robin is not directed at children.
If this page changes, the date at the top changes with it.
Who we are
Robin is made by Joydle Interactive LTD, a company registered in England and Wales (United Kingdom) under company number 17233012, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Write to us at hello@getrobin.app. There is a person on the other end of it.