Privacy Policy

1. Introduction

Ollama Inc. (“Ollama,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, software, and services (the “Service”). Disputes related to this Privacy Policy are subject to the dispute resolution and governing law provisions in our Terms of Service. If there are any terms in this Privacy Policy that you do not agree with, please discontinue use of our Service.

2. How Ollama Works

Ollama runs on your local device. We do not collect, store, transmit, or have access to your prompts, responses, model interactions, or other content you process locally. Your data stays on your machine.

We limit what we collect where we can, but we do collect certain information to provide you the Service. We may collect limited device and usage metadata (such as app version and request counts) that does not include your prompt or response content. When using cloud-hosted models, we process this content transiently to provide the Service and this content is not stored beyond the time required to fulfill the request. We implement technical measures designed to minimize retention of prompt and response content. We do not use your inputs or outputs to train any AI models or request prompt or response content in support requests. If you voluntarily include such content in support requests, it will be handled solely to resolve your issue and not used for training.

3. Information We Collect

Information you provide to us:

We collect personal information you voluntarily provide to us when registering for the Service, express an interest in obtaining information about us or our products and services, when using the Service or otherwise contacting us. The information we may collect can include:

• Account information (names, email addresses, user ID, passwords and other similar data)
• Payment information (processed by Stripe)
• Communications with us (support requests, feedback)

All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.

Information collected automatically:

We automatically collect certain information when you visit, use or navigate the Service. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Service and other technical information. This information is primarily needed to maintain the security and operation of our Service. The information we may collect can include:

• Device and browser information
• IP address and general location
• Diagnostic metadata for troubleshooting (does not include prompt or response content)
• Cookies and similar technologies
• Model download metadata

We use cookies and similar technologies for essential site functionality and, where applicable, to understand usage. You can control cookies through your browser settings, and disabling cookies may affect site functionality.

4. How We Use Your Information

We may use personal information collected via our Service to provide you our Service. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

• Provide, operate, and maintain our services
• Facilitate account creation and logon processes
• Process transactions and manage subscriptions
• Send service-related communications
• Respond to inquiries and provide support
• Improve and develop new features
• Detect and prevent fraud or abuse
• Enforce our Terms of Service and policies
• Respond to legal requests and prevent harm

Our legal basis for processing (for GDPR purposes) includes contract performance, legitimate interests, and your consent where applicable.

5. Information Sharing

We do not sell your personal information. We may process or share information on the following bases:

• Consent: We may process your data if you have given us specific consent to use your personal information in a specific purpose.
• To provide you the Service: Third parties who help us operate (e.g., Stripe for payments, cloud infrastructure providers, model inference providers).
• Legitimate interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests to provide you the Service.
• Legal requirements: When required by law, a legal process, or to protect our rights.
• Vital interests: We may disclose your information where we believe it is necessary to investigate, prevent, or act regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

Data may be transferred to and processed in the United States. Where required by law, we use appropriate safeguards for international transfers. If you are a resident in the European Economic Area, then these countries may not have data protection or other laws as comprehensive as those in your country. We will however take all necessary measures to protect your personal information in accordance with this privacy policy and applicable law.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information as required by law or for legitimate business purposes. You can request deletion of your account and associated data at any time.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible, we will securely store your personal information and isolate it from any further processing until deletion is possible.

Retention criteria by category:

• Account information: retained while your account is active and deleted upon request, subject to legal obligations.
• Billing records: retained as required by tax, accounting, and other legal obligations.
• Support communications: retained until resolved and then archived or deleted.
• Metadata and analytics: retained as needed for service operations, security, and improvement, then deleted or de-identified.

7. Data Security

We implement commercially appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is completely secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Service is at your own risk. You should only access the services within a secure environment.

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your personal information
• Object to or restrict processing
• Data portability
• Withdraw consent

California residents: Under the CCPA/CPRA, you have the right to make a personal information request for the specific information collected on you during the 12-month period preceding the request, including the right to know, access, correct, and delete your personal information, and to opt out of the sale or sharing of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with the Service, you have the right to request removal of unwanted data that you publicly post on the Service. To request removal of such data, please contact us using the contact information provided below.

EU residents: Under the GDPR, you have additional rights including the right to lodge a complaint with a supervisory authority.

Residents of other jurisdictions may have additional rights under applicable state, regional, or national privacy laws.

To exercise your rights, contact us at the email address below. We may need to verify your identity and will respond within reasonable timeframes required by applicable law.

Deleting your account: You may, at any time, delete your account via ollama.com under your active profile.

9. Children’s Privacy

Our services are intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. By using the Service, you represent that you are at least 13 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Service. If we learn we have collected such information, we will delete it promptly.

10. Data Breach

A privacy breach occurs when there is unauthorized access to or collection, use, disclosure or disposal of personal information. You will be notified about data breaches when Ollama believes you are likely to be at risk or serious harm. For example, a data breach may be likely to result in serious financial harm or harm to your mental or physical well-being. In the event that Ollama becomes aware of a security breach which has resulted or may result in unauthorized access, use or disclosure of personal information Ollama will promptly investigate the matter and notify the applicable supervisory authority not later than 72 hours after having become aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date and, where appropriate, providing additional notice. Your use of our services constitutes your binding acceptance of such changes.

12. Contact Us

Ollama Inc. is the data controller of this Privacy Policy. If you have questions about this Privacy Policy or wish to exercise your rights, contact us at hello@ollama.com.