Bohm

Privacy Policy

Effective: October 29, 2026

This policy explains how iyulab, inc. (the "Company") handles information on this website and in the Bohm desktop application ("Bohm"). It follows the personal information protection laws of the Republic of Korea.

1. The Bohm application

Bohm runs on your PC. The apps you add, their data, your settings and your visit history are stored in a folder on your PC. The Company does not operate a server that receives them.

If you turn on Keep chat history in its settings, what you see in a chat — your words, the answers and the step lines — and one line each time an app's scheduled re-read of a page runs (the host, the source name and whether it was read) are kept in that folder too, for the number of days you choose (30 by default) or until you delete it in settings. The text of pages the AI or an app read is not kept, and chat history is never part of a diagnostic report.

Before the AI opens a site it chose itself, Bohm asks you. If you answer Always, the site's origin — only its scheme, host and port, for example https://example.com, never a path, a page or anything you wrote — is kept in the settings file on your PC, so the AI does not ask again for that site in later chats. You take it back in settings under What you allowed. It is not sent to the Company and is not part of a diagnostic report.

While Bohm is being stabilized, it sends diagnostics to the Company: crash and error reports (the kind of error and where in Bohm's own code it happened), the exit code and restart outcome when its local runtime stops unexpectedly, and once a day a “started” note with Bohm's version, the number of apps you have added, the screen language and a random install ID. An error report is made only of set fields and carries no text: error messages, app names, what you type and file contents are never included. Offline, reports wait on your PC, the oldest are discarded first, and nothing stops working. You can see exactly what was sent under About Bohm › Diagnostics in its settings; your IT team can turn diagnostics off.

Bohm also sends the usage record — which days each app was opened and used, with no app names, paths or data — once a week, but only if you choose it under Send usage to improve Bohm in its settings. If you choose Usage record + quality data there, Bohm also sends, after each question you ask in its chat, a summary of how that question went: the result (answered, stopped, too long …), the number of rounds and seconds it took, how often each of its tools ran (read, click, type …), how often each kind of refusal came back, the page engine, and the kind of AI that answered (a company server, this PC, or the provider's name). A summary has only counts and set names — never your question, the answer, page addresses, page content, app names or files. Your IT team can turn this choice off or allow only the usage record.

Otherwise Bohm sends something to the Company only when you use Tell us in its settings — to report a problem or to ask for news — and press Send. It shows you exactly what will be sent before you do. Your IT team can turn this off.

To keep itself up to date, Bohm asks GitHub's public release page (github.com) for the number of the newest version each time it starts and once a day and, when there is a newer one, downloads that version's installer from GitHub. These requests carry nothing about you or your apps — only Bohm's version as its name — and, like any web request, reach GitHub from your network address. The installer is kept in Bohm's data folder until it is installed, then deleted. Your IT team can turn this off.

If you connect a key for an AI service, requests your apps make to that service are sent to it with your key, under that service's own terms. An app's request to a service with no key connected is answered by your local AI server, if you set one, or otherwise by the model on your PC — with the model on your PC, it stays on your PC. A request from an app to turn a recording into text goes the same way, and the recording goes with it; when neither a key nor your AI server answers it, the speech-to-text model on your PC does if you have got it, and then the recording stays on your PC.

When you ask Bohm about the web pages you have open, ask it to translate one of them, ask it to make or change an app, or save an answer as an app, Bohm hands what that needs — the text of the pages (when the AI needs to see what the page shows but does not write — a chart, a picture, a colour — also a picture of the part of that tab in view, only to an AI that takes pictures), your description of the app to make, the app's code (with Ask to fix the problem, also the changed or newly made version and the error messages it gave when opened or tried — a changed version is opened with a copy of your data, so its messages can quote a little of that data; a newly made one is opened with none, though its messages can quote what you typed while trying it; and a picture of a newly made app's first screen, opened with no data, so the AI that made it looks it over once), or your question, the answer and the tables read from the pages (when you make an app, for an open web tab you pick yourself with @ in the box: the tab's name and address, and the table's header names and first few rows) — to the AI you chose for it: a model on your PC, your AI server (for example, one your organization runs), or an AI service you connected with your key. None of it goes through the Company. Pages at addresses inside your network, and sites you or your IT team list, are not handed to AI services. If you send such a page to one of your apps while an AI service is connected, Bohm tells you first, since the app's AI requests could carry it there; when your IT team has turned page reading off, Bohm does not send it. An app saved from an answer reads those tables again, without any AI, when you choose Read again from the page open in Bohm — and on a schedule if you turn it on in the app's App info (every minute at the most often): while Bohm is open, on this PC, in a view you do not see that uses your own sign-ins. It stops and tells you when the site asks you to sign in or to show you are not a robot, keeps to the pace the site asks for, and, when a site'srobots.txt asks automated visitors to stay out, tells you before turning it on and turns it on only if you choose to. What it reads stays on this PC.

When you choose Use an AI chat site to make or change an app, Bohm sends nothing anywhere. It puts your request — with the app's code, when you change one — on your clipboard, for you to paste into an AI service yourself — after showing you all of it, with a note on anything that looks like a key, a private-network address or an email address. The data you entered in the app is not in it, while values written into the code itself are. What you paste is handled under that service's own terms. Your IT team can turn this off.

Bohm opens sites, searches, fills in or clicks on a web page only when you ask it to in the chat. By default it asks you first before submitting a form that sends or changes something (a search goes ahead) or pressing a button that pays, posts, sends or deletes; you can set it to only read. Before it opens a site it chose itself, Bohm reads that site's public robots.txt — the request carries nothing about you — and, to protect you legally, does not open what the site asks agents to stay out of. Pages you open yourself, or whose address you write in your request, are not checked. The same file is read before an app's page is read on a schedule. A search goes to the search engine you chose; when that engine's robots.txt keeps AI out, the search goes to DuckDuckGo instead, as an ordinary search from your browser.

When you bring in an app, or apply a new version of one, Bohm fetches the code libraries the app names from the public sites it names (such as cdn.jsdelivr.net or unpkg.com) once and keeps them on your PC, so the app runs without the internet afterwards. Those requests carry the library's address only — nothing of the app's data. A library that could not be reached then (with no internet, for example) is fetched again when the network comes back or when you open the app — at most once every five minutes per app. The app itself cannot reach any site.

You can give the AI that makes and changes your apps skills and MCP servers. A skill is a text file kept in Bohm's data folder on your PC; when a request fits it, the AI reads it, so it goes with that request to the AI you chose. The chat reads your own skills too (not the built-in ones) when a question fits one, unless the AI answering is the model on this PC — so such a skill goes with that question to the AI you chose. An MCP server is a program on your PC that Bohm starts, or an address it connects to, that you list in Settings or approve when the chat proposes it — Bohm shows the whole entry before adding it. When the AI wants to use one of a server's tools while making or changing an app, Bohm asks you first — you can also allow that server for the rest of that one task, and each use is then listed while it works. The chat can use them too, and Bohm asks you before each use. If you allow it, what the AI passes goes to that program or address, and what it answers goes to the AI you chose. None of it goes through the Company. Your IT team can turn MCP servers off.

When you choose Send as a package for an app, Bohm writes one .bohm file to the place you pick. By default it holds the app's code only; the app's data goes in only if you choose to include it. Where the files you added originally came from is kept as file names only, and AI keys you connected are never included. When the app was made with AI, the file also names the model that wrote its code. When you choose Put in a registry, Bohm writes the app's code — no data — to a folder set in its settings (a shared folder, for example). Neither sends anything to the Company or to any other server; who you give the file to is up to you.

When you choose Save this screen in an app, Bohm writes what the app shows now as one HTML file to your Downloads folder. The data on the screen goes into that file, including what is typed in fields (password fields are left out), and Bohm tells you so before saving. When the app was made with AI, the file also says so and names the model — in a line at the bottom and in its header, for software to read. It is not sent to the Company or to any other server; who you give the file to is up to you.

When you sign in on a website in a Bohm tab, Bohm offers to save the password and fills it in on that site next time. Passwords are kept by the password manager of Microsoft Edge WebView2 (the browser engine Bohm runs on), encrypted on this PC. Bohm itself does not read them and does not send them to the Company or to any other server; a password saved for a website is not filled in the apps you made or brought in; and an AI is not shown it — when the AI reads a page, a filled password field reads only as filled. You can turn saving off, or remove every saved password, in Settings (Save passwords). On a Mac, Bohm does not save passwords: the browser engine there has no password manager of its own, so Settings has no such line.

When you choose Get for an AI model in Settings, Bohm asks huggingface.co for the model's size, shows it to you with the model's licence, and downloads the model files from there only if you go ahead. The request names the model and comes from your network address; nothing of your apps or their data goes with it, and it does not pass through the Company. Hugging Face handles it under its own terms. Once downloaded, the model runs on your PC without the internet. The speech-to-text model is got the same way, after Bohm shows you its size. Your IT administrator can turn this off.

2. What we collect

  • Sign-ups (early access, news, the Mac version) — your email address, the optional note you write, and the page language.
  • Messages — what you write, your email address if you give one, and the page language.
  • Sent from Bohm — the message you write or the email address you give for news, the language of Bohm's screens and Bohm's version. Handled as messages and sign-ups below.
  • Diagnostics and usage record from Bohm — as described in section 1, with the network address it came from (not stored with the reports).
  • Visit statistics — this website uses Google Analytics, which records pages visited, the referring page, approximate location, device and browser type, and sets cookies to tell visits apart.

The network address (IP address) that sign-ups, messages and submissions from Bohm come from is used only to limit how often they can be sent, and is not stored (see section 9 for those received earlier).

3. Why

  • Sign-ups: to send the news you asked for and to tell you when Bohm for Mac is out (early access sign-ups: to invite you to try Bohm).
  • Messages: to answer you and to improve Bohm.
  • Diagnostics and usage record: to find and fix crashes and errors and to improve Bohm.
  • Visit statistics: to understand which pages are read and improve the website.

The Company does not sell this information or use it for advertising.

4. How long

  • News sign-ups: kept until you unsubscribe — every news email says how — then deleted within thirty days.
  • Mac version sign-ups: kept until we email you that Bohm for Mac is out, then deleted within thirty days.
  • Early access sign-ups: early access ended on October 1, 2026; they are deleted by April 1, 2027.
  • Messages: deleted within twelve months of receipt.
  • Diagnostics and usage record: deleted after ninety days.
  • Visit statistics: kept by Google Analytics for up to fourteen months.

Anything can be deleted sooner on request.

5. Services that process it for us

  • Microsoft Azure — hosts this website, stores form submissions, and receives diagnostics (Application Insights, Korea Central region) (Microsoft Corporation).
  • Google Analytics — visit statistics (Google LLC).

These services may store data outside the Republic of Korea.

6. Your choices and rights

You can ask to see, correct or delete what you gave us, or to stop receiving email, by writing to hello@bohmbrowser.com. You can block or delete cookies in your browser, or use Google's opt-out browser add-on, to stop visit statistics.

7. Contact

iyulab, inc. — hello@bohmbrowser.com

8. Changes

If this policy changes, the new version is posted on this page with its effective date. The sections above describe the current version of Bohm; what earlier versions did differently is in section 9.

9. Differences in earlier versions

If you run an older version of Bohm, these differences from sections 1 and 2 apply to it. Updating removes them.

  • Error reports: versions before 0.3.0 also sent the error message, with paths, addresses and email addresses removed.
  • Updates: before 0.10.8 Bohm only checked for a newer version and did not download it; before 0.10.14 it checked once a day only, not at each start. On a Mac, before 0.16.1 Bohm checked for a newer version but did not download it — it offered the download instead.
  • Speech to text: apps could ask for it from 0.10.11; the speech-to-text model on your PC answers from 0.10.12.
  • Robots rules: from 0.11.0 Bohm reads a site's robots.txt before opening a site it chose itself; from 0.12.13 also before a scheduled read.
  • Skills and MCP servers: from 0.12.6 for making and changing apps; allowing a server for one task from 0.12.7; in the chat from 0.12.14.
  • Reading on a schedule: from 0.12.13. Before 0.13.0 it was not turned on for a site whose robots.txt asks automated visitors to stay out.
  • Saving passwords: from 0.13.0 (Windows). On a Mac, 0.15.0 showed the Save passwords line in Settings although nothing was saved; from 0.16.0 the line is not shown.
  • Chat history: from 0.15.0, and only if you turn it on in settings. The one line per scheduled re-read is from 0.16.0.
  • Asking before the AI opens a site it chose itself, and the Always answer: from 0.16.0. Earlier versions open such a site without asking.
  • Picking open web tabs with @ so the AI that makes an app can see them: from 0.16.0.
  • Fetching a library again when the network comes back, and naming the AI model in a package or a saved screen: from 0.13.1.
  • A picture of the tab for an AI that takes pictures: from 0.13.6.
  • The Usage record + quality data choice: from 0.14.0; earlier versions do not send quality data.
  • Network addresses: sign-ups, messages and submissions from Bohm received before October 13, 2026 kept the address they came from; it is deleted with them as set out in section 4.