Last updated: October 10, 2026
BlackUI: BYOK Lite ("the app", "we", "us") is published by Thoiba Trader, Lanka, Hojai, Assam, India. This Privacy Policy explains what the app does with information when you use it, what stays on your device, and which third-party services you connect to by adding your own keys. It applies to the BlackUI: BYOK Lite Android app (distributed through the Amazon Appstore) and to this website section.
The short version: BlackUI: BYOK Lite has no accounts, no sign-in, no backend server, no proxy and no analytics. We do not supply any AI keys. Everything you create stays on your device, and when you chat, your device talks directly to the AI provider whose key you entered. We do not receive, see or store your messages, files or keys.
We do not collect personal information. The app has no registration, no login and no Thoiba Trader server that receives your data. In particular we do not collect or receive your name, email address, messages, files, API keys, device identifiers, location, contacts or usage analytics.
Because we hold no data about you, there is nothing for us to sell, share, profile or use for advertising. The app contains no advertising and no third-party analytics or crash-reporting tools.
If you email us (for example for support), we receive the email address and message you choose to send, and we use them only to reply.
The app saves the following in its own private storage on your device (IndexedDB and localStorage). None of it is sent to us.
Please note: your keys and chats are held in the app’s local storage inside the app’s private sandbox; the app does not apply additional encryption to them. Anyone who can unlock your device and access the app, or a rooted or compromised device, may be able to read them. Use a screen lock, and create keys with limited permissions and spending limits where the provider allows it.
Because this data lives only on your device, we cannot recover it. Clearing the app’s data, uninstalling the app or deleting a chat removes it permanently, with no backup on our side.
The app is “bring your own key” (BYOK). When you add a key, the app sends requests directly from your device to that provider. These requests do not pass through any server of ours. What you send is handled by the provider under its own terms and privacy policy, and any usage, charges and limits are between you and the provider.
Your messages, attached files and images, and any audio or video you add are sent to the Gemini API (generativelanguage.googleapis.com) using your Gemini API key. This includes:
How Google treats your content depends on the type of API key you use. Under Google’s terms, content sent through an unpaid (free-tier) Gemini API key may be used by Google to improve its products, and human reviewers may read samples of it, whereas content sent through a paid key is not used for that purpose. Check Google’s current Gemini API terms for the exact wording, and avoid sending sensitive information on a free-tier key.
If you add a Claude API key, requests that go to Claude (a condensed version of your conversation, your latest message and any images) are sent directly to Anthropic (api.anthropic.com) using your key, under Anthropic’s terms and privacy policy.
If you use the APK/AAB builder with your GitHub token, the app calls the GitHub API (api.github.com) from your device to: create a repository in your own GitHub account from the open-source template at github.com/thoibatrader-ship-it/apk-template-lite; upload your app’s HTML, icon and settings to it; store the signing secrets (described below) in that repository’s encrypted Actions secrets; start a build with your GitHub Actions minutes; and download the resulting APK/AAB and build logs. The repository is created as private. It is made public only if you explicitly ask the app to do so. The build runs on GitHub, not on any server of ours, under GitHub’s terms and limits.
The Advance Features unlock is a one-time in-app purchase processed entirely by Amazon. We do not run a payment gateway and never see your card, bank or payment details. Amazon tells the app whether the purchase is owned, under Amazon’s own privacy notice.
When you build an APK/AAB, the app generates a signing keystore on your device and saves the keystore file to your device once, for you to keep. The keystore and the password you choose are sent to GitHub only as encrypted repository secrets in your own repository (sealed with the repository’s public key before upload) so that your own GitHub Actions run can sign your app. They are never sent to us. We cannot see or recover them. If you lose the keystore file or its password you will not be able to publish updates signed with the same key, so please back both up yourself.
When an AI reply contains HTML, the app can show a live preview inside an isolated, sandboxed frame. That preview is code written by the AI model, and it runs on your device like any web page, so it may itself make network requests (for example, to fetch data or load a library) depending on what the code does. Review code before running or installing anything you do not trust. The app also runs AI-written file-processing scripts (such as converting or merging files) inside a sandboxed frame so that they cannot access your keys or chats.
To display the interface and to process files, the app loads some open-source libraries, fonts and icons from public content delivery networks, including jsDelivr (cdn.jsdelivr.net), cdnjs / Cloudflare (cdnjs.cloudflare.com) and Google Fonts (fonts.googleapis.com, fonts.gstatic.com). When Live Search shows sources, the app may also request each source site’s small icon from Google’s favicon service (www.google.com/s2/favicons), which tells Google the domain of that source. These providers receive standard connection data such as your IP address and device/browser details, under their own privacy policies. We do not receive that data.
Voice input is optional. If you tap the microphone button, the app asks for microphone access and uses your device’s speech-recognition service (on Android this is provided by the system, often by Google) to turn speech into text. That audio is processed by that service under its own privacy policy, not by us. You can also attach audio or video files to a chat, which are then sent to Gemini as described above. File attachments use the file or photo picker you choose; the app only reads the files you select. You can revoke any permission in your device settings at any time.
We keep nothing, so there is nothing for us to delete. You control all of your data:
All requests from the app to providers use HTTPS. Keys are sent only to the provider they belong to, in request headers. The app has no server of ours that could be breached because we do not operate one. No method of storage or transmission is completely secure, and because keys are stored on your device you are responsible for protecting your device and your keys. Do not share your keys or screenshots that show them.
BlackUI: BYOK Lite is not restricted to any country by us. Whether Gemini, Claude, GitHub and Amazon Appstore are available to you, and whether you may use them, depends on those providers’ own terms and the laws where you live. Your requests are sent straight from your device to the providers, which may process them in countries other than your own.
Depending on where you live (for example under India’s Digital Personal Data Protection Act, 2023, the EU/UK GDPR or California law) you may have rights to access, correct or delete personal data, or to object to its processing. Since we do not collect or hold personal data about app users, we have nothing to disclose or delete on our side, but you can still contact us at [email protected] with any question or request, and we will respond within a reasonable time, normally within 30 days. To exercise rights over data held by Google, Anthropic, GitHub or Amazon, contact those providers.
The app is not directed at children under 18, and we do not knowingly collect personal information from anyone. Because the app connects you to general-purpose AI services, it is intended for adults. If you are a parent or guardian and have concerns, contact us.
We may update this policy as the app changes. When we do, we will change the “Last updated” date above and, for material changes, tell you in the app or on this website. Continued use after an update means you accept the revised policy.
Thoiba Trader, Lanka, Hojai, Assam, India. Questions, requests or complaints about this policy: [email protected] or the Contact page.