Controller

Ingo Keutgen, email: ingo@keutgen.net (address: see imprint)

1. Summary

Libretto is an unofficial client for LibreChat servers and is not affiliated with the LibreChat project. We do not operate a server for Libretto, do not create user accounts and do not collect personal data. Libretto contains no advertising, no analytics or tracking services and no third-party software components that collect data. Your data travels directly between your device and the servers you enter in the app yourself.

2. What data the app processes

Profiles. The name, address (URL) of your server, colour and symbol of a profile are stored on your device only. A copy of name, colour and symbol is kept in a shared app container (App Group) so that widgets and shortcuts can show your profiles. It never leaves the device.

Sign-in and session. Each profile uses its own browser storage on your device, separate from the other profiles. Session cookies are additionally backed up in the iOS keychain so that you stay signed in. Optionally, for automatic re-login, you can store your email address, password and two-factor key in the keychain. Access is protected by Face ID, Touch ID or your device passcode. This information is sent only to the server of the respective profile.

Chat content. Messages and answers are processed and stored by the LibreChat server you entered. Its operator is responsible for that. We have no access to it.

Log. The error log in the app exists in memory only, is never transmitted and disappears when the app is closed.

3. Voice mode

Speech recognition. Libretto uses Apple’s speech recognition. By default recognition runs on the device (“Recognise on device only”). If you switch this off, or on-device recognition is unavailable for your language, iOS sends the audio to Apple for recognition. Apple’s privacy terms apply. The recognised text is entered into the chat of your profile like typed text and sent to its server, optionally together with an additional instruction you can configure.

Speech output. By default the iOS system voice reads answers aloud, entirely on the device. Optionally you can choose OpenRouter as the speech output. Answer texts are then transmitted sentence by sentence to OpenRouter (OpenRouter, Inc., USA) and from there to the speech service you selected. This only happens with your own OpenRouter key, which you enter in the app (it is kept in the keychain), and only after you explicitly confirm a notice in the app. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by switching back to the system voice or deleting the key. The privacy terms of OpenRouter and of the selected speech provider apply. The transfer goes to the USA.

4. CarPlay, Siri, widgets and controls

A conversation in the car or on a locked device runs as an iOS call on your device. There is no connection to the telephone network. Voice commands to Siri are processed by Apple under its own privacy terms; Libretto only receives the trigger of the command. Widgets and controls display only locally stored information and send nothing.

5. Permissions

  • Microphone and speech recognition: for voice mode and for voice input on the chat page.
  • Camera and photos: only if you upload a photo or file in a chat. The content goes to the server of your profile.
  • Face ID / Touch ID: only to unlock the stored credentials locally. Neither the app nor we receive biometric data.

iOS asks you before each access, and you can revoke it at any time in iOS Settings.

6. In-app purchases

Libretto offers a voluntary thank-you (“Espresso”, “Cup of coffee”, “Pot of coffee”) and the confirmation of commercial use as in-app purchases. Apple processes the purchase through your Apple account. We receive neither your name nor payment data. Whether you have bought the confirmation of commercial use is determined locally by the app through Apple’s StoreKit, which then shows the badge “Commercially licensed”. Apple’s terms apply.

7. Support request

In the settings you can have a support request prepared by email. For this, Libretto fills your configuration into an email to support@computeq.de: app, iOS and device version, locale, your profiles with names and addresses, the voice mode settings and up to ten recent error messages of the active profile. Passwords, keys, cookies and chat content are never included. You see the text before sending and can change or delete it. The email is only sent if you send it yourself. We use the information to answer your request (Art. 6(1)(b) and (f) GDPR) and delete it when it is no longer needed. For questions about company licenses the same applies to emails to sales@computeq.de.

8. Check of the server address

Before Libretto displays a page or saves a profile, the app checks whether a LibreChat server responds at the address. For this it calls public addresses of that server (for example /api/config). The request goes only to the server you entered, which sees your IP address. The app remembers a positive result locally on your device for up to seven days. Libretto does not display other websites.

9. Demo profile

To try the app, Libretto offers a demo profile. It shows our demo page www.computeq.de/libretto-demo/, which answers with fixed sample texts only. What you type there stays in the app’s browser and is not sent to us. The page uses no cookies. When it is requested, the web server records the usual access data (IP address, time, requested address, browser identifier). It serves secure operation and is kept in our hosting provider’s server logs for a short time only (Art. 6(1)(f) GDPR).

10. Servers, encryption and certificates

Libretto connects to any server you enter. For testing purposes an unencrypted connection (http) or a self-signed certificate can be allowed per profile. The app warns about this. Secure connections (https) with a valid certificate are the default and recommended.

11. Disclosure to third parties

We do not pass data on to third parties. Data flows only where you direct it yourself: to your LibreChat server, to Apple (speech recognition, Siri, purchases) and, if you enable it, to OpenRouter.

12. Retention and deletion

The data stays on your device until you delete it. If you delete a profile in the app, its details, the associated browser storage (cookies, cache) and the keychain entries are removed. Therefore delete your profiles before removing the app so that the keychain entries disappear as well.

13. Your rights

You have the right of access, rectification, erasure and restriction of processing, and the right to lodge a complaint with a data protection authority. Because we store no personal data through Libretto, these rights concern the operator of your server for chat content, OpenRouter for speech output and Apple for speech recognition and purchases.

14. Changes

We update this policy when the app or the law changes. The current version is available at this address.

15. Contact

For privacy questions: ingo@keutgen.net

As of: 6 October 2026