Privacy Policy
Last updated 1 July 2026 · Project Walnut, published by Strataic Ltd.
The short version. Project Walnut is local-first. There are no accounts and no sign-up. Your notes, chats, diary, lists, health context and memory live on your device. Nothing is sold, and nothing is used for advertising. The only data that leaves your device is a request you actively send to an AI provider — and, if you turn the privacy gateway on, the names and details you mark as sensitive are replaced with placeholders before it goes.
Who we are
Project Walnut is an app published by Strataic Ltd (“we”, “us”). You can reach us at support@strataic.com.
Our approach
Walnut is designed so that your personal data stays with you. It is stored in plain form only on your own device (and, if you enable Apple’s iCloud sync, in your own private iCloud account). We do not operate a server that collects your content, and we do not have accounts through which we could see it.
What stays on your device
The following are stored locally on your device and are not transmitted to us:
- Your conversations with Walnut, tasks, shopping and to-do lists, countdowns, trackers, diary entries and body & mind logs.
- Walnut’s “memory” — the facts and connections it builds up to be useful to you.
- Health information read from Apple Health (see below).
- Any API keys you enter, which are held in the device Keychain.
When data leaves your device
AI requests you choose to send
Walnut’s optional AI features work by sending your request to an AI provider that you configure with your own API key (for example Anthropic or OpenAI). This only happens when you send a message that uses the cloud AI. That request is handled under the AI provider’s own privacy policy, so please review theirs as well.
With the privacy gateway enabled, the specific names and details you have marked as sensitive are replaced with neutral placeholders on your device before the request is sent, and restored only in the reply shown back to you. Walnut also shows you a “Process” view of exactly what was sent. We never send your whole memory to the cloud.
Apple Health
If you grant access, Walnut reads summaries from Apple Health on your device to give the assistant context. It does not write to Health. Health data is never used for advertising, is never shared with us, and is only included in an AI request if you send one that needs it — subject to the same pseudonymisation as everything else.
Weather & location
If you use the Weather feature, Walnut uses your approximate location to request a forecast from Apple’s WeatherKit. Weather data is provided by Apple Weather and its data sources; see Apple’s Weather data source attribution. Your location is used only to fetch weather and is not collected by us.
Calendar
If you grant access, Walnut reads events from your device calendar to show them alongside your day. This stays on your device.
Shared lists and messages (“People”)
When you share a list or chat with someone, the content is end-to-end encrypted on your device before it is relayed through Apple’s CloudKit. The encryption key is exchanged directly between you and the other person via a QR code / link and is stored only on your devices. The relay carries encrypted data it cannot read; Apple and we cannot read the contents. Anyone you share with can see what you share with them.
Backups you create
If you export a backup, the file is encrypted with a password you choose. The password is never stored and never sent anywhere; only someone with the password can open the file. Backups exclude Health data and API keys.
What we do not do
- No advertising, and no use of your data for advertising.
- No analytics or tracking SDKs, and no selling or sharing of your data with data brokers.
- No account, so no profile of you held by us.
Third parties
Depending on the features you use, data you actively send may be processed by: the AI provider you configure (under your own key); Apple (WeatherKit for weather, CloudKit for optional iCloud sync and for relaying shared/encrypted content). Each operates under its own privacy policy.
Retention and deletion
Because your data lives on your device, you control it. You can delete individual items in the app, or use Settings → Reset to wipe user data (or everything). Deleting the app removes its local data from the device. If you used iCloud sync, remove the app’s data from your iCloud storage in iOS Settings.
Children
Walnut is not directed at children and does not knowingly collect data from children.
Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.
Contact
Questions about privacy? Email support@strataic.com.