Agents › Underdog
Underdog
Agent Safeguards 7/10 Policy grade C6/12What it can do as you
Agent Safeguards
7/10What Conway Research says about how Underdog handles the access you give it. The five scores add up to a number out of 10, with no label.
A1Logins
Saved passwords stay in an on-device vault the model can’t read (“fills saved passwords without ever reading them”), but the agent “pays with a one-time card made just for that order, and we make a tiny bit of it”, and no page says how card details are handled. Lack of specificity prohibits a score of 2: the company’s statement does not name payment details.
A2Capture
“Underdog processes your personal content on your own device”, and the policy lists everything Underdog receives, ending “That is the whole list”. The agent’s screenshots are personal content, so captures stay on the device.
A3Memory
Memories can be seen, edited and deleted one by one (“See, edit, or delete them in Settings”), but no page says memory can be turned off, and no purge timeline is stated.
A4Where it runs
Every model runs on the device: “There is no Underdog email server and no server-side AI”, and the apps “contain no client or key for” a third-party AI service.
A5Exit
Agent data lives on the device, so a missing export tool does not force a 0. But there is no export tool, server records are kept “for a limited period” with no timeline, and account deletion is by direct message: “message @0xSigil on X and we will delete it.”
Policy grade
6/12Read from the Underdog Privacy Policy (effective 11 Oct 2026), which covers the iPhone, iPad and Mac apps and the website.
Policy grade for Underdog: C6/12, read from Underdog Privacy Policy, effective 11 Oct 2026.
Access
The policy lists everything Underdog holds (“That is the whole list”), but the only access path is a request — “You may also request access to, or correction of, information we hold about you, subject to applicable law” — with no self-serve view of account data.
Portability
No export tool and no portability right appear on any Underdog page. Your content stays on your device, “encrypted”, with no stated way to get it out in a usable file, and the server-held data has only the access request above.
Friction
Usage sharing, ad measurement and connected accounts are self-serve switches, but account deletion runs through a direct message — “To delete your account, message @0xSigil on X” — and other requests go to an email address, with no stated response time.
Deletion
On-device data is deleted with the app, but account deletion is by request (“message @0xSigil on X and we will delete it”). Usage counts “are deleted with it”, while “Server records are kept for a limited period” and no post-deletion purge timeline is stated.
Sells / shares
“We do not sell your information”, but the website’s Meta pixel sends Meta your hashed email and account identifier, and “some US state laws call that ‘sharing’ for advertising”. You can switch it off on the site or with Global Privacy Control.
Trains AI
Personal content never reaches Underdog — “Nothing you say, record, type or receive is uploaded for processing, by us or by anyone else” — so it cannot train on it. The models run on your device.
Timeline
- First funding round raised
- Underdog’s on-device models published on Hugging Face
- Andreessen Horowitz announces it led the round in Conway Research
- Saluki 27B on-device model released
- New privacy policy: account deletion moves to a direct message on X; a Meta pixel is added to the website
Every cell is stated: read from Conway Research’s published pages, not tested by us. Spot an error? Tell us. How agents are graded →