Privacy Policy

Last updated: July 2026 · GRAB by Aloium

GRAB is built on a simple principle: your files are yours. This privacy policy explains what data GRAB collects, processes, and stores — and, just as importantly, what it does not.

What GRAB does not collect

GRAB does not collect, transmit, or store your personal data on external servers for analysis or profiling. Specifically:

• No file contents or file metadata are ever stored on any server
• No search queries are sent to any server — they are interpreted locally on your Mac
• No usage analytics or telemetry are collected
• No account or registration is required
• No third-party SDKs or tracking libraries are included

How GRAB works

All intelligence happens locally on your devices. The AI model that interprets your search queries runs entirely on your Mac's Neural Engine. File search is performed via Spotlight and Vision OCR on your Mac. Files are always encrypted end-to-end (Curve25519 key exchange + AES-GCM) before leaving your Mac, and can only be decrypted by your paired iPhone.

Local network transfers

When your iPhone and Mac are on the same network, files are transferred directly between your two devices over a peer-to-peer connection. No server is involved, and no data reaches the internet.

Remote transfers and the relay

When your devices are not on the same network (for example, when you are away from home), GRAB can transfer files remotely through a relay server operated by Aloium. You should know exactly what this means for your privacy:

• Data passing through the relay is always end-to-end encrypted. The relay forwards encrypted bytes between your devices and is technically unable to read, decrypt, or reconstruct your files.
• The relay does not store your files. Data is forwarded in transit and not retained.
• The relay does not log file names or file contents.
• Standard, transient connection information (such as IP addresses) may be processed momentarily to route the connection, as is inherent to any internet communication.

In short: remote transfers use a server to move data, but that server is "blind" — encryption keys never leave your devices, so no one, including us, can access your files.

Local data storage

GRAB stores only what is necessary for the app to function: your device pairing configuration (including cryptographic keys, kept in the system Keychain) and your recent search history. This data is stored locally on your devices and is not transmitted externally.

Subscriptions

GRAB offers an optional paid subscription (GRAB Plus). Purchases and subscription management are handled entirely by Apple through the App Store. GRAB does not receive or store your payment information. Apple's handling of purchase data is governed by Apple's own privacy policy.

Children's privacy

GRAB does not knowingly collect any information from children under the age of 13.

Changes to this policy

If this policy changes, the updated version will be published at this URL with a revised date.

Contact

Questions about privacy? Write to us at aloium.tech@gmail.com