There are no accounts of ours, no analytics, and no tracking. The app collects nothing about you, sends nothing about you anywhere, and contains no third-party analytics or advertising SDK of any kind. Nobody who makes this app can see that you are using it, or what you do in it.
What stays on your device
Everything you make. Policies you import, motions you write or record, plans, scenes, runs you record for Dream-1 (the duck's camera pictures and the commands you sent), and any language model you download all live in the app's own storage on your device and are never uploaded anywhere by the app.
Credentials such as a Hugging Face token, a bench token or an API key for a model service you configured are stored in the iOS Keychain. They are sent only to the service they belong to, only when you ask for something that needs them.
When the app talks to the network
Only in response to something you do. The app has no background activity, no periodic sync, and no phone-home.
| Where | When | What goes |
|---|---|---|
huggingface.co |
You search for or download an on-device model, publish a file you chose to publish, or start a training job. | Your search text; the model you picked; your token if you set one. On a publish, only the file you selected. For a training job, the training settings you chose, including any reward weights your picks produced, the name of your records dataset, and your token as the job's secret. |
huggingface.co sign-in, thenpollen-robotics-reachy-mini-central.hf.space |
You tap Sign in with Hugging Face to list your ducks from anywhere, and each time that list refreshes. | Hugging Face's own sign-in page, in Apple's browser sheet. Then a short-lived sign-in token to Pollen Robotics' rendezvous, which answers with the robots on your account, under Pollen's privacy policy. The request names this app and its version in its User-Agent, as Pollen asked, so it is never taken for their own app. |
api.github.comraw.githubusercontent.com |
You browse Pollen Robotics' public policy list. | Nothing about you. This is an unauthenticated read of a public repository. |
| A bench you added | You run, record, measure, or drive. | The policy or motion you are running and the commands you send. This is a machine on your own network, at an address you typed. |
| A robot's bridge you connected | You connect to a duck through the bridge on its computer, and then drive it, run a plan or a card row on it, or install a policy on it. | The bridge's token you typed, the commands you send, and a policy file you chose to install. This is a machine on your own network, at an address you typed. |
| The duck's camera | You tap Show the camera. | Nothing about you. The app reads pictures from the duck's own computer, at an address you typed, a few times a second. Nothing is recorded or stored, and nothing goes anywhere else, except as below for Dream-1. |
| Dream Labs (api.dreamlabs.ai, platform.dreamlabs.ai) | You save a Dream Labs key, or run Dream-1 on the duck. | The key you pasted, which you keep in one of two places. Saved in Settings, it is kept in this device's Keychain and sent only to Dream Labs. Saved on the bridge screen, it goes to the robot's computer, which checks it with Dream Labs and keeps it there, and the app does not store it. While Dream-1 runs, whichever of the two holds the key sends Dream Labs the duck's last few camera pictures, its last walk command and the task you typed, about every two seconds, and stops when the run stops. Your key is billed by Dream Labs, and what you send is under their privacy policy, not ours. |
| A model service you added | You ask a model to draft something, and you have chosen a service rather than an on-device model. | The words you typed and the context the app builds. It goes to whoever runs that service, under their privacy policy, not ours. |
If you use an on-device model instead, nothing you type leaves the device at all, because the weights were downloaded once and everything after that is local.
Files you export or share stay on your device until you send them somewhere yourself. The share sheet hands the file to whatever you pick, and the app is not told what you picked.
Permissions the app asks for
Camera
Used only in the Lab, and only when you choose to put a duck on your own floor. It finds the floor so the duck can be drawn at its real size on it. No image is recorded, stored, or transmitted. Every Lab mode also works on a rendered stage with the camera off.
Local network
Used to find computers on your own network running the physics bench, the plan router or a robot's bridge, which announce themselves over Bonjour, and to reach the ones you saved or typed in when you ask them to run something. The app looks only for those services, only on your own network; nothing is added until you tap Add, and nothing found is sent anywhere.
Bluetooth
Used to find a Microduck robot near you, pair with it, and ask it which software it is running. It looks for one specific service identifier belonging to the robot and ignores everything else. It is not used for location, for proximity to anything, or for any other purpose.
Children
The app collects no personal information from anyone, of any age. There is nothing to delete because nothing is gathered.
What we would have to tell you, and cannot
There is no data retention schedule, because nothing is retained. There is no list of third parties data is shared with, because there is no data and no sharing. There is no way to request a copy of your information from us, because we do not have any. If that changes, this page changes first, and the app's release notes will say so.
Independent project
This is not the official Microduck app. Pollen Robotics make the robot: Microduck, by Pollen Robotics · Pollen Robotics.
Microduck Studio is an independent project. It is not made by, endorsed by, or affiliated with Pollen Robotics. Microduck is their robot; this is an independent owner's app for it. Policies released by Pollen are labelled as theirs throughout the app.