Organizations: Shandong University · The Hong Kong University of Science and Technology (Guangzhou) · The Hong Kong University of Science and Technology · New York University · Xi’an Jiaotong University · Australian National University · Institute of Computing Technology, Chinese Academy of Sciences
Mobile GUI agents powered by Multimodal Large Language Models (MLLMs) can execute complex tasks on mobile devices. Despite this progress, most existing systems still optimize task success or efficiency, neglecting users' privacy personalization. In this paper, we study the often-overlooked problem of agent personalization. We observe that personalization can induce systematic structural heterogeneity in execution trajectories. For example, privacy-first users often prefer protective actions, e.g., refusing permissions, logging out, and minimizing exposure, leading to logically different execution trajectories from utility-first users. Such variable-length and structurally different trajectories make standard preference optimization unstable and less informative. To address this issue, we propose Trajectory Induced Preference Optimization (TIPO), which uses preference-intensity weighting to emphasize key privacy-related steps and padding gating to suppress alignment noise. Results on our Privacy Preference Dataset show that TIPO improves persona alignment and distinction while preserving strong task executability, achieving 65.60% SR, 46.22 Compliance, and 66.67% PD, outperforming existing optimization methods across various GUI tasks. The code and dataset will be publicly released at https://github.com/Zhixin-L/TIPO.
Figures & tables
Figure 1. Illustration of personalized trajectory selection for smartphone GUI agents. Given the same task goal, observation history, and user portrait, different privacy personas can induce different preference-conditioned branches, leading to distinct execution trajectories.
Figure 2. A showcase of persona-induced trajectory divergence. Under the same task goal, Utility-first and Privacy-first share the same initial steps but diverge at a privacy-sensitive decision point, resulting different executable trajectories.
Figure 3. Comparison between step-DPO and TIPO on aligned trajectory pairs. While step-DPO treats positions uniformly, including alignment-induced placeholders, TIPO highlights persona-critical steps via preference-intensity weighting and reduces placeholder noise through padding gating.
Figure 4. An overview of the Privacy Preference Dataset construction pipeline. For each task, we collect paired trajectories under both Privacy-first and Utility-first personas, followed by human verification and pairwise alignment to construct trajectory-level preference pairs.
SR
PAS-S
PAS-U
Compliance
PD
Methods
P-f
U-f
Overall
P-f
U-f ↓
P-f↓
U-f
Comp
Non-comp↓
/
Frozen
44.08%
34.50%
39.29%
16.13
78.57
88.89
65.31
40.72
83.73
48.15%
SFT
70.21%
60.13%
65.17%
35.60
32.38
37.04
38.12
36.86
34.71
59.26%
DPO ( Rafailov et al., 2023 )
70.31%
60.37%
65.34%
28.20
46.67
14.81
35.67
31.94
30.74
59.26%
ORPO ( Hong et al., 2024 )
69.65%
61.31%
65.48%
17.26
46.67
54.32
43.90
30.58
50.50
48.15%
CPO ( Xu et al., 2024 )
68.63%
61.36%
65.00%
19.73
39.52
61.73
48.82
34.28
50.63
48.15%
Table 1. Comparison of TIPO against baseline methods on the Privacy Preference Dataset. Results are reported in terms of task success rate (SR), persona adherence (PAS-S/PAS-U), compliance, and persona distinction (PD) under Privacy-first (P-f) and Utility-first (U-f) conditions. Otherwise indicated, the higher is better for values in this table.
Figure 5. Radar-chart comparison of different methods on representative higher-is-better metrics, including Overall SR, PAS-S under Privacy-first, PAS-U under Utility-first, Compliance, and PD. The figure provides a holistic view of the trade-off between task executability, persona adherence, and persona distinction across methods.
SR
PAS-S
PAS-U
Compliance
PD
Methods
Overall
P-f
U-f
Comp
/
DPO
65.34%
28.20
35.67
31.94
59.26%
w/o pw
65.26%
29.84
41.20
35.52
59.26%
w/o pg
65.59%
40.54
37.32
38.93
62.96%
Ours
65.60%
42.85
49.59
46.22
66.67 %
Table 2. Ablation results of TIPO on the Privacy Preference Dataset. We compare different component variants in terms of overall task success (SR), persona adherence (PAS-S/PAS-U), compliance, and persona distinction (PD).
Figure 6. Ablation comparison on representative persona-related metrics, including PAS-S (P-F), PAS-U (U-F), Compliance, and PD. Removing either preference-intensity weighting or padding gating degrades performance, while the full TIPO consistently achieves the best overall results.
SR
PAS-S
PAS-U
Compliance
PD
Type
Overall
P-f
U-f
Comp
/
B & I
59.85%
49.84
56.78
53.31
66.67%
A & F
59.17%
96.89
27.94
62.42
80.00%
Trans
72.17%
23.33
51.47
37.40
62.50%
Table 3. Category-wise performance of TIPO on the Privacy Preference Dataset across Browsing & Interaction, Account & File Management, and Transactional Tasks.
Smartphone GUI agents execute tasks by operating directly on app interfaces, offering a path to broad capability without deep system integration. However, real-world smartphone use is highly personalized: users adopt diverse workflows and preferences, challenging agents to deliver customized assistance rather than generic solutions. Existing GUI agent benchmarks cannot adequately capture this personalization dimension due to sparse user-specific data and the lack of fine-grained evaluation metrics. To address this gap, we present PSPA-Bench, the benchmark dedicated to evaluating personalization in smartphone GUI agents. PSPA-Bench comprises over 12,855 personalized instructions aligned with real-world user behaviors across 10 representative daily-use scenarios and 22 mobile apps, and introduces a structure-aware process evaluation method that measures agents' personalized capabilities at a fine-grained level. Through PSPA-Bench, we benchmark 11 state-of-the-art GUI agents. Results reveal that current methods perform poorly under personalized settings, with even the strongest agent achieving limited success. Our analysis further highlights three directions for advancing personalized GUI agents: (1) reasoning-oriented models consistently outperform general LLMs, (2) perception remains a simple yet critical capability, and (3) reflection and long-term memory mechanisms are key to improving adaptation. Together, these findings establish PSPA-Bench as a foundation for systematic study and future progress in personalized GUI agents.
Hongyi Nie, Xunyuan Liu, Yudong Bai +4
Northwestern Polytechnical University · Tsinghua University · Peking University +1
Personalized mobile agents that infer user preferences and calibrate proactive assistance hold great promise as everyday digital assistants, yet existing benchmarks fail to capture what this requires. Prior work evaluates preference recovery from static histories or intent prediction from fixed contexts. Neither tests whether an agent can elicit missing preferences through interaction, nor whether it can decide when to intervene, seek consent, or remain silent in a live GUI environment. We introduce KnowU-Bench, an online benchmark for personalized mobile agents built on a reproducible Android emulation environment, covering 42 general GUI tasks, 86 personalized tasks, and 64 proactive tasks. Unlike prior work that treats user preferences as static context, KnowU-Bench hides the user profile from the agent and exposes only behavioral logs, forcing genuine preference inference rather than context lookup. To support multi-turn preference elicitation, it instantiates an LLM-driven user simulator grounded in structured profiles, enabling realistic clarification dialogues and proactive consent handling. Beyond personalization, KnowU-Bench provides comprehensive evaluation of the complete proactive decision chain, including grounded GUI execution, consent negotiation, and post-rejection restraint, evaluated through a hybrid protocol combining rule-based verification with LLM-as-a-Judge scoring. Our experiments reveal a striking degradation: agents that excel at explicit task execution fall below 50% under vague instructions requiring user preference inference or intervention calibration, even for frontier models like Claude Sonnet 4.6. The core bottlenecks are not GUI navigation but preference acquisition and intervention calibration, exposing a fundamental gap between competent interface operation and trustworthy personal assistance.
Large language models (LLMs) are typically aligned with population-level preferences, despite substantial variation across individual users. We introduce POPI, a user-level personalization framework that separates the problem into two components connected by a natural-language interface: a shared inference model that distills heterogeneous user signals into a concise preference summary, and a shared generator that conditions on this summary to produce personalized responses. Both components are trained under a unified preference-optimization objective, with reinforcement learning handling the non-differentiable inference step. This objective decomposes into generator approximation error and summary informativeness, revealing how a single loss simultaneously drives accurate generation and informative summarization. Because the interface is natural language, learned summaries can be inferred once per user and reused across different generators -- including frozen, black-box commercial APIs. Across four personalization benchmarks, POPI generally improves personalization quality while reducing context overhead by up to an order of magnitude.
Yizhuo Chen, Xin Liu, Ruijie Wang +7
University of Illinois Urbana-Champaign · Amazon · University of Notre Dame