Privacy Policy
Last Updated: September 14, 2026. At SearchWith.app, we believe privacy is not a promise made in legalese—it is an engineering guarantee enforced by hardware and operating system boundaries.
The Zero-Permission Baseline
SearchWith Core (app.searchwith) requests zero internet permissions. The Android OS permission android.permission.INTERNET is completely omitted from the application manifest.
This means the Core app has no network stack, cannot open HTTP/S sockets, cannot phone home, and cannot send analytics, telemetries, or search queries to us or any third party.
1. Local Search History Vault
SearchWith Core contains a native offline history vault. When you perform a search, your search query and selected search engine are stored solely within your device's private internal SQLite database using Android Room.
- Zero Cloud Transmissions: Your history is never transmitted to remote servers.
- Granular Control: You can inspect, re-search, and delete individual query records at any time.
- One-Tap Complete Wipe: Tapping the trash icon in Search History purges all local history entries instantly.
- Uninstall Cleanliness: Uninstalling SearchWith completely removes your local database file from the device storage.
2. Search Dispatch & Direct Web Routing
When you select a search engine (e.g., DuckDuckGo, Google, Reddit, ChatGPT, or custom engines), SearchWith templates your query into the provider's standard search URL and dispatches an Android Intent to your default web browser or app.
Once handed off to your browser, your connection is governed by that browser's and search engine provider's respective privacy policies. SearchWith acts solely as a stateless, client-side dispatcher.
3. Modular Sidecars & Process Boundaries
SearchWith uses a federated architecture. Any optional feature requiring network connectivity (such as cloud backup or AI proxy synthesis) is isolated into its own independent sidecar APK with distinct Linux UID process boundaries:
SearchWith Cloud
Backups utilize Zero-Knowledge client-side encryption (AES-256-GCM with Argon2id). The server stores only ciphertext; we cannot decrypt your data.
SearchWith AI
Acts as an anonymizing proxy that strips client metadata, IP addresses, and personal fingerprints before querying AI endpoints.
SearchWith Incognito
An ephemeral WebView sidecar that wipes all cookies, storage, cache, and session memory immediately upon process exit.
SearchWith Ads & Rewards
Opt-in rewards ledger using broad categorical masking so your granular queries remain unexposed.
Inter-process communication (IPC) between Core and any installed sidecar requires cryptographic signing certificate verification over AIDL interfaces.
4. Website & Web Infrastructure
When visiting searchwith.app:
- We do not employ third-party tracking scripts, invasive marketing pixels, or fingerprinting beacons.
- Hosting infrastructure logs (such as standard Vercel edge access logs containing IP and User-Agent) are kept solely for security, DDoS mitigation, and service availability.
- Direct APK download links are served over TLS (HTTPS) without user registration or mandatory sign-in.
5. Contact & Verification
Because our source code and manifest are auditable, anyone can decompile or inspect the APK with tools like aapt or Android Studio to verify that zero network permissions exist.
If you have security disclosures, questions, or verification inquiries, please reach out via our GitHub repository or contact team at github.com/benstearman/SearchWith.app.