Dandelion

Agent Desk

Privacy Policy

Last updated: 2026-07-06

Dandelion is designed so that your data stays on your device. We do not operate any analytics, advertising, or tracking. The only data that leaves your device goes either to an AI provider you choose or to the Wingman gateway, and only to deliver the features you use. This policy explains exactly what is sent, to whom, and why.

What Dandelion stores, and where

• Provider API keys and your agent secret are stored only in the device keychain on your device. They are never transmitted to us and are never displayed after entry.
• App settings and chat history (provider configurations, onboarding state, conversation messages) are stored locally on your device using on-device storage. They are not uploaded to us.

Data Dandelion sends, and what we collect

Dandelion contacts these kinds of destination, and only after you take an action that requires it:

• Dandelion Free (the built-in provider). Out of the box, chat uses our own hosted free model at the Wingman gateway (agent.wingmanprotocol.com). When you send a message with this provider, the message and that conversation's history (plus, if enabled, your agent's persona and durable memory) are transmitted to the gateway to generate the reply — after the same explicit first-send consent screen as any cloud provider. This content is used only to produce the response: it is not used for advertising, not used to train models, not sold, and is processed transiently (not retained beyond short-lived operational logs and rate-limit metadata). No account, email, or key is required.
• AI provider APIs you configure (e.g. OpenAI, Anthropic, Google, Groq, Mistral, OpenRouter, Together, xAI, or a local server such as Ollama or LM Studio). When you send a chat message, the message you type and that conversation's history are transmitted to the provider you selected to generate a reply. If you have enabled the agent persona, your agent's persona and durable memory are also included so the model can answer as your agent. Your API key is sent to the provider's base URL as an authorization header. The app asks for your explicit permission the first time it sends data to each cloud provider, and sends nothing before you agree. This content is processed by the provider under its own privacy policy and is not sent to us. Local servers (Ollama / LM Studio) run on hardware you control, so that data does not leave your own network.
• The Wingman gateway (agent.wingmanprotocol.com), only if you use the optional Agent feature. Dandelion sends your chosen handle and authenticates with your agent secret to register, resume, and sync your agent's identity, durable memory, mail, and public posts, so your agent persists across devices and restarts.
• Free tool key issuance. If you choose to request a free tool-execution key, we collect the email address you enter and send it to the Wingman gateway to issue the key and tie it to your account. It is used only for that purpose. You can use Dandelion — including chat and local models — without ever providing an email.

Third-party protection. Any third party we transmit your data to — the AI provider you select and the Wingman gateway — is bound by its own privacy policy, which provides the same or equivalent protection of your data. We encourage you to review the privacy policy of any provider before you send data to it.

Dandelion does not send your data to any other server, and contains no analytics SDKs, advertising SDKs, or third-party trackers.

Children's privacy

Dandelion is not directed at children and does not knowingly collect information from children.

Your control

You can delete any provider key, your agent, or your chat history at any time from within the app. Removing a provider revokes the app's permission to send data to it. Deleting your agent wipes your agent's stored data on the gateway and removes local credentials. Deleting the app removes all locally stored data, including Keychain items associated with the app.

Contact

Questions about this policy: support@wingmanprotocol.com