Privacy Policy

SteerClaw Mobile and steerclaw.ai · Last updated October 5, 2026

Steer Corp., a corporation incorporated in Delaware, United States of America (“Steer”, “we”, or “us”), provides SteerClaw Mobile for Android and iOS and the website steerclaw.ai. This policy describes those services. Other Steer products have their own policies.

SteerClaw is a free AI agent for your phone. You connect it to a model using your own API key or server configuration. You do not create a SteerClaw account. You choose the model and connected services used for your tasks. An external service may require its own account or payment.

A “model” is the AI system that reads your requests and writes the replies, such as OpenAI’s GPT or Anthropic’s Claude, or one running on your own server. The company or server that runs it is the “model provider”. Steer does not run any model.

“Connected services” are the outside services SteerClaw exchanges information with when you use it:

• model providers;
• MCP services: tools from other companies that you connect, such as Notion or GitHub;
• web search providers;
• websites the app reads for a task or opens in its built-in browser;
• any other external service you connect or that a task uses.

1. Our privacy approach

• SteerClaw does not send app analytics, advertising data, session recordings, crash reports or routine diagnostic uploads to Steer Corp.
• Your conversations, attachments, workspace data, memory and settings are stored only on your device, or in a folder you choose. Steer does not receive any of it unless you choose to send it to us, for example in feedback or a support email. Model providers and other connected services you use receive the parts needed for your requests, as described below. App data is excluded from cloud backup.
• A task can send prompts, conversation context, selected files, website content and tool results to the model or service you choose. Local execution of tools does not mean every task stays offline.
• We receive information you choose to send us, for example an in-app report or a support email. Website hosting also involves processing normal network requests.
• We do not sell personal information or use it for cross-context behavioral advertising.

2. Information used by the app

2.1 Conversations, files and working context

The app processes your messages, generated responses, attachments, generated files, tool activity and saved working context to carry out your requests and let you return to your work. Relevant context from earlier turns may be included in later model requests. Changing models in an existing conversation can send that context to the newly selected provider.

Files in a folder you choose may be managed by another app or cloud-storage service. Files you export, share or save outside SteerClaw remain subject to the destination’s storage and backup settings.

2.2 Provider credentials and connections

The app stores provider and service credentials using Android Keystore or iOS Keychain-backed mechanisms. Credentials are used to authenticate requests to the intended service. Browser sign-in may store session cookies in the app’s browser storage. We do not ask you to send device passcodes or API keys to Steer support.

2.3 Optional device permissions

Depending on the platform and feature, the app can access contacts, calendar information, location, selected photos or files, the camera, microphone, speech recognition, and notifications. Operating-system permission prompts and app controls govern access. Denying access may prevent the related task while leaving unrelated features available.

Device data returned by a tool can become part of the conversation sent to your selected model. A device permission is separate from authorization to disclose personal information to a third party. Review the destination and task before providing personal information about yourself or another person.

On iOS, voice input uses Apple’s speech recognition, which may process audio on Apple’s servers. On Android, voice input uses on-device recognition when available and otherwise uses the selected system speech service, which may process audio remotely. Transcribed text is placed in the composer and can be sent to your selected model when you send the message.

App lock uses the operating system’s authentication result. SteerClaw does not receive your fingerprint, face template or device passcode. Task notifications describe progress; notification visibility also depends on your operating-system settings.

3. Models, MCP services and websites you choose

When you use a connected model, the selected provider receives the content needed for the request, potentially including conversation history, attachments and results from tools. A connected Model Context Protocol (MCP) service receives the inputs sent to its tools. Websites opened or fetched for a task receive normal web requests and any information you submit to them. Web searches go directly from your device to the search providers you choose (Exa, Parallel, Firecrawl, Keenable, Tavily or Brave Search), and each receives your search terms. Parallel also receives a random identifier for each conversation, so it can group that conversation’s searches. These requests do not pass through Steer. Results can then be sent to your selected model.

These destinations also receive connection information such as your IP address. Their own terms, privacy policies, retention settings, training practices and international processing arrangements apply, so review them for the providers you use.

Online connections normally use HTTPS. The app also supports explicitly approved local or private-network HTTP endpoints; HTTP itself is not encrypted. Do not use unencrypted connections for sensitive information.

4. Information you send to Steer

If you email us for support, early access, a privacy request or a security concern, we receive the address you use, your message, attachments you choose to send and normal email metadata. We use that information to handle your request, communicate with you and protect the service. Android feedback goes to support@steercorp.io. Please omit credentials and unnecessary personal information.

Feedback. On iPhone, you can send us a report from the app. You enter your name, and can add an email address, a comment, a screenshot, files or recent chat details. The report also includes basic information about the app and your device. The form shows everything that will be sent before you send it. We use reports to investigate problems, review reported AI responses and improve the app. Reports are stored with our cloud hosting provider and deleted after 90 days.

On Android, feedback opens your email app with a message to support@steercorp.io. We receive only what you choose to send.

5. Website requests and service providers

The website uses Amazon Web Services for hosting and delivery. Serving a page involves processing network information such as IP address, requested URL, time and browser headers. Hosting providers may process operational and security records under their service terms. We do not use the website to collect your app conversation history.

The website serves its own fonts and does not load third-party fonts, advertising or product-analytics scripts. Links to other websites and an email application lead to services with their own policies.

Steer may use email and professional service providers to handle messages, legal obligations and security matters. Access to information we hold is limited to people and providers who need it for those purposes. We may disclose information where required by law, to protect lawful rights or safety, or in a corporate transaction subject to applicable safeguards.

6. Retention and deletion

Local conversations and working data remain until removed using the available app controls or device storage controls. Deleting a chat does not necessarily delete generated files, shared copies, independent working memory, browser sessions or files in your selected workspace. Remove those separately where applicable. Removing the app does not delete external files or third-party accounts; operating-system credential and backup behavior can also differ.

In-app reports are deleted automatically after 90 days. We keep support and early-access correspondence for as long as reasonably needed to handle the request and any continuing relationship. Relevant records may be kept longer when necessary for a specific legal obligation, dispute or security investigation. You can request deletion using the contact below. Hosting and email providers also have their own operational retention arrangements.

For information already sent to a model provider, MCP service or website, use that provider’s controls or contact it to request deletion. Steer cannot promise deletion from an independent provider’s systems.

7. Your choices and privacy rights

You can stop a task, remove or change a connection, deny or revoke device permissions, delete local chats and manage files. Revoking access does not undo completed actions or previously transmitted requests.

Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a copy of personal information we hold, restrict or object to processing, withdraw consent, and complain to a privacy authority. California residents may also have rights concerning sale, advertising-related sharing and sensitive information. We do not sell personal information or share it for cross-context behavioral advertising, and do not discriminate against people for exercising applicable rights.

For EEA, UK and Swiss users, where applicable, we process support and service information to fulfill requests, with consent where required, for proportionate security and administrative interests, or to comply with legal obligations. Specially protected information requires the additional conditions that apply to it. General acceptance of terms is not a substitute for a required specific consent.

For users in India, we honor applicable access, correction, erasure and grievance rights as the relevant requirements apply. Contact our grievance contact below.

Send requests to support@steercorp.io. We may ask for limited information needed to verify your relationship to the requested records. You do not need to create an account or disclose your API key. We respond within applicable legal timeframes. We cannot remotely retrieve device-only conversations for a privacy request.

8. International processing

Steer is a US company. Website delivery, support and selected third-party services may involve processing in the United States or other countries. The countries involved depend on the destination and its infrastructure; device-resident work is not automatically transferred to a Steer server. Where a transfer we control requires safeguards, applicable transfer requirements govern it. Contact us for information about a specific transfer.

9. Children

SteerClaw is intended for adults aged 18 or older and is not directed to children. We do not knowingly solicit children’s personal information. If you believe a child has sent us personal information, contact us so we can investigate and remove it as appropriate.

10. Security and changes

We use platform storage protections and access controls, but no device, network or service can be guaranteed completely secure. Protect your device and revoke exposed provider credentials with the provider. Report suspected vulnerabilities privately to the contact below without including real secrets or other users’ data.

We will update this page when our practices change and revise the date above. Material changes will be explained on the website or in the app as appropriate; fresh consent will be requested where required. Your statutory privacy rights are not waived by this policy or the Terms of Use.

11. Contact information and grievances

Steer Corp. · Privacy and grievance contact: Samarth Bhargava

Email: support@steercorp.io

Please identify your request as concerning SteerClaw Mobile.