Privacy Policy for Panda

Effective Date: August 9, 2025

Thank you for using Panda ("the App"), your personal AI phone operator. This Privacy Policy explains what information we collect, how we use and share it, and your choices regarding your information.

1. Information We Collect

To function as an on-device AI agent, Panda requires access to certain information. We are committed to transparency and only collecting what is necessary to provide and improve the service.

a) Screen Content (via Accessibility Service)
To understand your requests and operate your phone's user interface, the app uses the Android Accessibility Service. This service allows Panda to collect:

• UI Element Information: Text, content descriptions, and resource IDs of elements on your screen.
• Screen Structure: The hierarchical layout of your screen (as XML data).
• Screenshots: The app has the capability to take screenshots to provide visual context to its AI models.
• This information is collected to understand the current state of your device to perform actions like tapping, swiping, and typing on your behalf.

b) Audio Information (via Microphone Permission)
The app requires the RECORD_AUDIO permission to:

• Process Voice Commands: When you speak a command, the audio is processed to convert it into text.
• Wake Word Detection: The app listens for the "Panda" wake word to activate. This processing is done entirely on your device by the Picovoice Porcupine engine; your ambient audio is not sent to the cloud for wake word detection.

c) User Instructions & Conversations
We collect the text of your typed or spoken commands and the history of your conversation with Panda during a session to understand your goals and provide relevant responses.

d) Installed Applications Information
The app uses the QUERY_ALL_PACKAGES permission to get a list of your installed applications. This information is used solely to identify apps by name so Panda can open them for you more quickly and reliably.

e) User-Created Memories (On-Device Storage)

• Automatic Extraction: Facts may be extracted from your conversations to personalize your experience (e.g., remembering your brother's name if you mention it). This analysis is performed by Google's Gemini AI.
• Manual Creation: You can manually add facts in the "My Memories" section.
• All extracted and created memories are stored in a secure, private database on your device. They are not accessible by other applications.

f) Unique User Identifier
The app generates a random, anonymous Unique User ID (UUID) that is stored on your device. This helps in managing your memories and sessions without using any personal identifiers like your name or email.

g) Log Data for Debugging
To diagnose and fix issues, we log some interaction data with our third-party AI services. This data is sent to Google Firebase Firestore and includes the AI prompt, the AI's response, the AI model used, and success/error status. This log data is not linked to your personal identity.

2. How We Use Your Information

• To Provide Core Functionality: To understand your commands and automate actions on your device.
• To Personalize Your Experience: To use your stored memories to provide more context-aware and helpful responses.
• To Improve the Service: To analyze anonymized log data to debug issues and enhance the app's performance and reliability.

3. Data Sharing and Third-Party Services

Panda is a complex AI system and relies on a few specialized third-party services to function. We do not sell your data.

• Google (Gemini AI Models): Your conversations, screen content (XML or screenshots), and text from new memories are sent to Google's Generative AI services for processing, reasoning, and analysis. This is essential for the AI to understand context and generate responses. Your data is subject to Google's Privacy Policy.
• Google (Firebase Firestore): Anonymized log data of AI interactions is stored in Google's Firestore for debugging and service improvement, as described in section 1(g).
• Tavily (Search API): If a task requires web research, a search query derived from your instruction is sent to the Tavily Search API to find information. This is subject to Tavily's Privacy Policy.
• Picovoice (Porcupine Wake Word): As stated in section 1(b), wake word detection is processed 100% on your device. No audio is sent to Picovoice's servers.

4. Your Control and Choices

You are in control of your data.

• Managing Memories: You can view, add, and permanently delete any or all of your memories at any time from the "My Memories" screen within the app.
• Revoking Permissions: You can revoke the Accessibility Service, Microphone, and Overlay permissions at any time through your device's Android Settings. Please note that revoking these permissions will limit or disable Panda's core functionality.

5. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy in this section of the app.

6. Contact Us

If you have any questions about this Privacy Policy, please contact us at: ayush0000ayush@gmail.com