AnPyer1. Who we are
AnPyer is published by Open Book Co., Ltd.. For any privacy question or request, e-mail contact@anpyer.com. We are the data controller for the (very limited) processing described here.
2. What AnPyer does
AnPyer runs Jupyter notebooks (.ipynb files) on your Android device using a Python interpreter that ships inside the app. All code execution, rendering, and file handling happen locally. The app does not require an account, login, or any registration.
3. Data that stays on your device
The following data is created or stored on your device only. We have no access to it.
| Data | Where it is stored | Why |
|---|---|---|
| Notebook files you open, edit, or create | The location you choose through the Android file picker | Core function: opening, editing, saving notebooks |
| A working copy of the folder your notebook lives in (only if you grant the app access to that folder) | App-private storage. Files are copied in so that Python code can read them by relative path; files Python writes are copied back to the folder you granted | Core function: pd.read_csv("data.csv") and friends. Turning the folder switch off stops the sync; the working copy is removed when you uninstall the app |
| Recently opened notebook list | App-private storage | Convenience: quick re-open |
| AI provider settings, including API keys you enter, and the assistant switches described in §4.4 | App-private storage (WebView local storage) on this device only, protected by the Android app sandbox | To authenticate your requests to the provider you configured. Keys are never sent to us. |
| AI conversation of the current session | Memory only; discarded when the app is closed | Displaying the assistant's replies |
| Reports you file about an AI reply ("Report this reply") | App-private storage | Kept locally so you can review, export, or e-mail them. Nothing is sent automatically. |
| Interface preferences (language, panel sizes and similar) | App-private storage | UI display |
| Per-cell assistant flags ("hidden from AI", "locked") and an "opened from an external source" marker | Inside the notebook file itself, under metadata.anpyer, so the file remains a standard .ipynb | Your privacy controls travel with the notebook |
App-private storage is removed by Android when you uninstall the app. You can also remove keys, settings, reports and the recent-files list at any time from About → Delete local data inside the app. Notebook files you saved to a location of your choice are ordinary files that you manage yourself.
4. The optional AI assistant (bring your own key)
AnPyer includes an optional assistant that can read cells of the notebook you are working on, edit them, insert or delete cells and — only with the per-session permission described in §4.4 — run a code cell and read its output. It is off until you configure it: you must enter an API key for a third-party large-language-model provider yourself. We do not provide, resell, or proxy any AI service.
4.1 What is sent, and to whom
When you send a message to the assistant, the following is transmitted directly from your device to the provider you configured (for example DeepSeek, OpenAI, Google Gemini, OpenRouter, or any other OpenAI-compatible endpoint whose address you enter):
- your message text and the conversation so far;
- the contents of notebook cells that the assistant reads, edits or runs (only when the assistant invokes a notebook tool, which it does to answer your request), including cell outputs and error messages, in summarised form. Cells you mark as hidden are never included;
- a short system instruction describing the app environment. It contains: the name of the open notebook and its number of cells; the list of preinstalled Python packages; your interface language; the current date, time and time zone as reported by your device (so the assistant can answer time-related questions); and, if a cell is being edited, a short excerpt of that cell around your cursor;
- if you have turned on "Let the AI read files in the notebook's folder" (§4.4): the directory listing and the text content of files in that folder that the assistant chooses to read;
- your API key, as required by the provider to authenticate the request.
The assistant may also ask to fetch a public web page or call a public HTTP API on your behalf. Each such request requires your explicit confirmation in the app before it is made, and it goes to the address shown in the confirmation card.
The device time zone is sent only as a clock reference. It is not used to infer your location, and the app never accesses location services.
4.2 We are not a party to that transfer
We do not receive, store, log, or have any technical ability to access these requests or responses. The provider's own privacy policy and terms govern how it handles your data (including retention and whether it is used for training). Please review them before entering a key. Where the built-in provider templates offer a "do not store" option supported by the provider's API, AnPyer sets it; we cannot guarantee provider behaviour.
4.3 Transport security
All built-in provider templates use HTTPS. If you enter a custom endpoint, the connection security is that of the address you enter.
4.4 Your controls
- Confirmation cards. Every change the assistant proposes to your notebook (editing, inserting, deleting or running a cell) and every outgoing web request it proposes is shown to you first. You may allow each step individually or, for the current session, allow all steps at once. Each accepted change is one Undo step.
- Hide a cell from the AI. A hidden cell's source, outputs and identity are never included in any request. Lock a cell to let the assistant read it but never modify it. Both flags are saved in the notebook file.
- Running cells ("go nuts") is a per-session permission: it is off when the app starts and resets when you close it. Runs go through the same notebook execution path as your own taps on Run; there is no hidden sandbox.
- Reading files in the notebook's folder is a separate switch in AI settings, off by default and persistent. When it is on, the assistant may read any text file in that folder without a per-file confirmation, and that content is sent to your provider. Keep files you do not want a model to see out of that folder, or leave the switch off.
- Report a reply. You can flag any assistant reply. Reports are stored on your device only and are never sent automatically; you can export or e-mail them yourself.
5. Code that you run
AnPyer executes the Python code in your notebooks. Some bundled libraries (for example requests) can make network requests if your code asks them to. Such requests are initiated by your code, go to the destinations your code specifies, and are not visible to or controlled by us. Please review notebooks from sources you do not trust before running them.
6. Data we collect ourselves
None. AnPyer contains no analytics, advertising, crash-reporting, or telemetry SDK. The app makes no network connection to any server operated by us; we have none. We therefore do not collect device identifiers, usage statistics, location, contacts, or any other personal data.
If you contact us by e-mail, we will process the information you include in order to reply, and retain the correspondence for as long as reasonably needed for that purpose.
7. Google Play
Purchases and installation are handled by Google Play under Google's own terms and privacy policy. We receive only the aggregated, non-identifying statistics that Google Play Console shows to every developer (for example install counts by country). We do not receive your name, e-mail address, or payment details from Google.
7.1 How this maps to the Play "Data safety" section
Google's Data safety form counts data as "collected" whenever it leaves the device, even if it goes to a third party you chose and never to the developer. Our listing therefore declares the following, all of it optional, used for app functionality only, encrypted in transit, and sent solely when you use the AI assistant:
- App activity → Other user-generated content: your messages to the assistant and notebook cell contents;
- Files and docs: text files in the notebook's folder, only when the switch in §4.4 is on.
Nothing is declared as "shared", because we never receive the data and therefore cannot share it; the transfer to your provider is initiated by you. No data is used for advertising, analytics or personalisation.
8. Permissions
| Android permission | Used for |
|---|---|
INTERNET | Only the AI assistant (§4) and network code you run yourself (§5). Nothing else in the app uses the network. |
| File access | AnPyer does not request broad storage permission. It uses the Android system file picker (Storage Access Framework); it can only read or write the files and folders you explicitly select. |
9. Children
AnPyer is a developer tool intended for adults. Its Google Play listing targets users aged 18 and over, and the app is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from anyone, including children.
10. Your rights and how to exercise them
Because we hold no personal data about app users, requests for access, correction, or deletion under GDPR, UK GDPR, CCPA/CPRA, PIPL, or similar laws can be fulfilled entirely by you on your device:
- Delete app data: About → Delete local data removes API keys, provider settings, reports and the recent-files list; uninstalling the app removes everything in app-private storage, including any working copy of a folder you granted (§3).
- Delete data held by an AI provider: contact that provider directly; we cannot do it on your behalf.
- Anything else: e-mail contact@anpyer.com. You also have the right to lodge a complaint with your local data-protection authority.
11. International transfers
We transfer no data. If you use the AI assistant, your data is sent by your device to the provider you chose, wherever that provider operates. Consult the provider's policy for its transfer safeguards.
12. Changes to this policy
We may update this policy when the app gains new features that affect data handling. The current version is always published at https://anpyer.com/privacy/ and linked from About inside the app. Material changes will be noted in the app's release notes on Google Play. The effective date at the top tells you when it was last changed.
13. Contact
Open Book Co., Ltd.
E-mail: contact@anpyer.com
A Simplified Chinese translation is available at /zh/privacy/. In case of any discrepancy, this English version prevails.