Privacy
Last updated: September 28, 2026
If you only read one paragraph
Lar is an app for your own Hermes agent. The conversation runs between your phone and your server. We — the people who make Lar — do not collect, store, or have any way to read your messages, files, voice notes, or anything else about you. Not because we're nice, but because of how it's built: there is no server of ours where it could live.
Where your data goes
- Messages, photos, files, voice — from your phone to your Hermes over an encrypted connection. On top of TLS, end-to-end encryption (X25519 + AES-256-GCM): only your phone and your server hold the keys. Anyone in the middle sees noise.
- Pairing key — born on your phone when you scan the QR, kept in the system's secure storage — Keychain on iPhone, Keystore on Android. Never leaves the device in the clear.
- Relay — if your server sits behind a home router and your phone can't reach it directly, traffic goes through our relay at
relay.larconnect.com. It forwards encrypted frames without decrypting them — it can't, it has no keys. It stores no content and keeps no logs of who said what. - Push notifications — via Apple's or Google's notification service and Expo. They receive only your device token so your server can wake you. The notification text is written by your agent, not by us.
- Language, theme, settings — on your phone. They go nowhere.
Permissions and why
- Camera — to scan the QR when pairing, and to take a photo for your agent when you choose to.
- Microphone — to record a voice note. Only while you hold the button.
- Photos — to pick an image to send, and to save what your agent sends back.
- Notifications — so a finished task can find you when the app is closed.
None of this is required. Each permission is asked for the moment you first tap the corresponding button, and not before.
What Lar doesn't have
- Analytics. We don't know how many users we have or what they do.
- Advertising identifiers or tracking. The app manifest says so:
NSPrivacyTracking = false. - Third parties we share with. There are none — other than Apple or Google (push delivery for your platform) and the relay described above.
- Sign-up. No email, no phone number, no name.
Demo for people reviewing the app
There's a demo connection inside — for App Store reviewers, and for anyone who wants to try Lar without setting up a server. The demo server is shared; conversations on it can vanish at any time. Don't tell it secrets.
How to turn it all off
Tell your agent /devices revoke — the phone is unpaired. Delete the app — all keys and local data go with it. On our side there's nothing to delete: we never had a copy.
Children
Lar isn't for children under 13, and we don't collect information from them — or, for that matter, from anyone else.
If something changes
The new version will appear here with a new date. We won't change the rules quietly.
Ask
Privacy questions — support@meetlar.com. A human answers.