Agent Panda
How it worksFeaturesFAQJoin the beta

Privacy policy

Last updated: 31 October 2026

Agent Panda is a private, non-commercial hobby project by Christian Trummer, Stella-Klein-Löw-Weg 17, 1020 Wien, Austria ("we"). Contact: privacy@agent-panda.christiant5r.dev

Summary

Agent Panda has no user accounts. Most data stays on your device. What leaves it depends on the features you use, as described below. We do not sell your data, show ads or use tracking on this website.

Data stored on your device

You can remove your key in Settings. Uninstalling the app deletes the data stored by the app.

Data sent to others

Bitpanda. The app sends your API key and requests directly to Bitpanda to read your portfolio and, if you allow it, to request quotes and carry out trades you confirm. Bitpanda's own privacy policy applies.

Demo account. If you try the demo, the app creates a random demo key and uses our server instead of Bitpanda. Our server stores your simulated trades and limits under that key and deletes them after 30 days without use. It contains no real financial data.

On-device AI model. Your questions and portfolio data are processed on your device and are not sent to an AI provider. Downloading a model connects to its source, such as Hugging Face or the QVAC network, which can see your IP address.

Cloud AI model (optional). If you choose it, your messages and the portfolio data the agent reads to answer them are sent through our server, hosted on Cloudflare, to the AI provider we have selected: Cloudflare Workers AI, Anthropic or xAI. This also applies to scheduled tasks that run in the background. Your API key is not sent. Our server does not store the content of your messages. It stores usage numbers per install, such as tokens used. Each provider handles the content under its own terms.

Web search (optional, on by default). Search queries and pages the agent reads are sent to Firecrawl and, as a fallback, Google News. Queries can reflect what you asked, including assets you hold. You can turn web search off in Settings.

Voice. Speech recognition runs on your device when supported. Otherwise your phone's speech service, such as Google's, may process your audio under its own terms.

App operation and security. The app registers an anonymous install token and can use Google Play Integrity to check that the app is genuine. Once a day it sends that token, the type of model in use and the app version, so we can count active installs. Cloud model use is metered per install to apply limits.

Beta sign-up. If you join the beta on our website, we store your email address and the sign-up time on Cloudflare, based on your consent. We use your address only to invite you and share beta updates, and with Google if we add you to a Google Play test. We delete it when the beta ends, or sooner if you ask us or withdraw your consent.

This website. Our hosting provider, Cloudflare, processes technical data such as your IP address to deliver the site.

Why we process data, and legal bases

We process this data to provide the features you request (performance of a contract), and to keep the service secure and prevent abuse (legitimate interests).

Children

Agent Panda is for adults aged 18 and over.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your data, to data portability, and to complain to a data protection authority. In Austria, that is the Datenschutzbehörde. Because we hold no accounts, we may need your install token to find data linked to it. Contact us at the address above.

Changes

We will post updates here and change the date above.