Privacy Policy

VoxyAI is free software for Mac, iPhone, iPad, and Android, with an extension for Visual Studio Code. The free apps need no account or sign-in. They run AI on your own hardware: on the device itself, or on a Mac you paired with it. With the free apps, we do not operate any server that receives your voice, your text, your files, or your AI requests, and the apps contain no analytics, advertising, or crash reporting.

This policy explains what the apps handle on your device, the few network services they contact and when, what our website (voxyai.io) collects, and what the upcoming paid Enterprise plan will handle. The Enterprise plan works differently from the free apps: it will include online services that we operate and that store data for the organizations that subscribe. See Enterprise Plan below. It describes VoxyAI 2.0 for Mac and version 2 of the iPhone and iPad app, the Android app, and the VS Code extension. Earlier versions worked differently; if you use one, please update.

Throughout this policy, the badges below indicate which platform a section applies to:

At a Glance

This table describes the free apps. The Enterprise plan is covered in its own section.

What We Collect All platforms

The free apps do not send us your voice, transcriptions, prompts, chats, files, clipboard, memories, or settings, and we have no copy of them. The free apps have no accounts, so we hold no name, email address, or password for you. Information reaches us only in these cases:

• Mac update checks: a request to our update server, described under Update Checks below.
• Our website: standard web requests and a language cookie, described under Our Website below.
• If you contact us: we receive what you send, such as your email address and message, and use it to reply.
• The Enterprise plan: when an organization subscribes, we will store the data described under Enterprise Plan below.

Everything else described in this policy is processed on your own devices, or by a third party you choose to use, under that third party's terms.

Where AI Runs All platforms

VoxyAI has no cloud AI providers. Your prompts are processed by one of these engines:

• Apple Intelligence macOS iPhone & iPad Apple's on-device foundation model, on supported devices. VoxyAI uses only the on-device model.
• MLX macOS An engine built into VoxyAI that runs models you download from Hugging Face on your Mac.
• Ollama macOS An open-source runtime that VoxyAI downloads and runs on your Mac, listening only on your Mac (127.0.0.1). If you already run Ollama yourself, VoxyAI uses your copy at its standard local address.
• Gemini Nano Android Google's on-device model, provided by the Android AICore system service on supported phones. AICore is part of Android and is governed by Google's terms and privacy policy.
• On-device models Android Models you download to the phone and run there.
• VoxyAI Mac All platforms A Mac you paired with LLM Host. Your prompts go to that Mac over an encrypted connection and are processed by its local models. See LLM Host and Device Pairing below.

What an engine receives depends on the feature you use: for example the words you dictated, the text you asked to rewrite, your chat messages and attachments, and, when those features are on, text from your screen, relevant memories, or excerpts from your Knowledge files. On the Mac, VoxyAI also tells the engine the name of the app you are working in so it can match the format.

Model and Runtime Downloads

Downloading a model or runtime is a request to the service that hosts it. That service sees your IP address and which file you asked for, and handles that information under its own privacy policy. VoxyAI sends no information about you or your use of the app in these requests.

• Hugging Face macOS Android MLX models on the Mac and the models in the Android catalog are downloaded from huggingface.co. On the Mac you can add a Hugging Face access token for gated or private models; it is stored in your Mac's Keychain and sent only to Hugging Face.
• GitHub macOS When you set up Ollama, VoxyAI downloads the Ollama runtime from Ollama's official releases on GitHub (api.github.com and github.com).
• Ollama macOS Ollama models are downloaded by the Ollama runtime from Ollama's model registry.
• A download address you enter Android If you paste your own model URL, the app downloads from that server.

Downloads happen only when you start them or set up the engine. After a model is downloaded, using it requires no network connection.

Voice and Speech Recognition All platforms

The microphone is used only while you are dictating. VoxyAI does not listen in the background and does not save audio: it streams the audio to the speech recognizer and discards it. Only the resulting text is used.

• Mac: VoxyAI uses Apple speech recognition and requires on-device recognition, so your audio is transcribed on your Mac and is not sent to Apple.
• iPhone and iPad: VoxyAI uses Apple speech recognition. Depending on your device and language, Apple may process the audio on the device or send it to Apple's servers to transcribe it, under Apple's privacy policy.
• Android: VoxyAI uses the speech recognition service set on your phone, which on most phones is provided by Google. That service may send your audio to its provider's servers to transcribe it, under the provider's privacy policy. Your phone's speech settings may let you use offline recognition instead.

When VoxyAI reads a reply aloud, it uses your device's built-in voices. On Android this is the text-to-speech engine set on your phone.

What the Mac App Reads and Stores macOS

Everything below stays on your Mac (and in any backups you make of it, such as Time Machine). Stores marked encrypted are encrypted by VoxyAI with a key kept in your Mac's Keychain; the key is not synced to iCloud.

• Clipboard History (off by default): saves text you copy, up to 1,000 items by default, in an encrypted database. This can include sensitive text you copy, such as passwords. You can exclude apps, clear the history, lower the limit, or turn it off in Settings.
• Chat history: your conversations, saved in an encrypted database. You can delete any conversation.
• User Memory (off by default): short facts VoxyAI learns from your chats, rewrites, and dictation, and, if you turn those options on, from your clipboard and the apps you use with Screen Context Awareness. Saved in an encrypted database; you can view and delete them.
• Knowledge (off by default): indexes files and folders you choose so answers can draw on them. The index, which includes text excerpts from those files, is saved in VoxyAI's Application Support folder and is not encrypted by VoxyAI.
• Screen Context Awareness (off by default): with Screen Recording permission, when you start VoxyAI it captures an image of the frontmost window and recognizes its text on your Mac using Apple Vision. Up to 4,000 characters of that text are added to your request so the answer fits what you are looking at. The image is not saved, and the text is kept in memory for at most 30 seconds. Password managers and Keychain Access are blocked by default, and you can block other apps.
• Screenshot Renamer (off by default): reads the text in new screenshots on your Mac and renames the files based on their content.
• Projects and file tools: in a project, the AI can list, read, and search files inside the folder you chose. Every change it proposes (writing, editing, or creating files or folders) needs your approval. Folder organizing works the same way: you review the plan before files move.
• Usage dashboard: a local record of which engine and model handled each request, token counts, timing, and success. It does not contain the text of your requests.
• Settings and preferences: stored in your Mac's standard app preferences.

Automation: Mail, Messages, Calendar, and Contacts

Automation is off by default. When you turn it on and grant the permissions, VoxyAI can read and act on your data in these apps on your behalf:

• Mail: reads messages, drafts replies, and sends email through the Mail app (Automation permission).
• Messages: reads your conversations from the Messages database on your Mac (Full Disk Access) and sends replies through the Messages app (Automation permission).
• Calendar: reads, creates, changes, and deletes events (Calendar permission).
• Contacts: looks up names so messages show people instead of phone numbers (Contacts permission).
• Meeting Prep: gathers an event's details, its attendees, and recent email threads with them to write a briefing.

This data is sent only to the engine you selected. Each action follows the policy you set for it: run automatically, ask you first, or block. Sending email or messages acts in your name, so review what you approve. VoxyAI keeps an encrypted record of automation decisions on your Mac.

MCP Servers

MCP is off by default. If you add MCP servers, the AI can call their tools. A local (stdio) server is a program that runs on your Mac with your permissions. A remote (HTTP) server is a service operated by someone else: when a tool is called, VoxyAI sends that server the tool request, which can include text from your conversation, and receives its response. Remote servers handle that data under their own terms and privacy policies, so add only servers you trust. Server settings and any tokens you enter are stored encrypted on your Mac.

Coding Tools

If you turn on Coding Tools, VoxyAI runs a local server so coding tools on your Mac can use your local models. It listens only on 127.0.0.1 and cannot be reached from other devices. If you click the button to set up a terminal coding tool, VoxyAI adds a clearly marked shell function to your ~/.zshrc.

What the iPhone, iPad, and Android Apps Store

iPhone & iPad Your conversations and settings are stored in the app on your device. VoxyAI does not add its own encryption to conversations; they are protected by iOS and iPadOS data protection and are included in your device backups (iCloud or computer) according to your backup settings. Pairing keys are stored in the Keychain. Text you send to VoxyAI from the Share sheet or from Shortcuts and Siri is processed by the engine you selected in the same way as a chat.

Android Your conversations, settings, and downloaded models are stored in the app's private storage on your phone. VoxyAI does not add its own encryption to conversations. Pairing keys are stored encrypted with a key held in the Android Keystore. If Android backup is turned on for your phone, Android may include the app's data in your Google backup.

On all three platforms, files and images you attach to a chat are read on the device and sent only to the engine you selected. LLM-as-judge, if you turn it on, sends a reply to a second engine you choose to check it.

VS Code Extension VS Code

The extension works with VoxyAI for Mac on the same computer. When you use a command, it sends the editor context that command needs (such as your selection, the current file or part of it, diagnostics, small related project files, or your git changes) to VoxyAI for Mac at 127.0.0.1, over an encrypted connection. It does not connect to the internet and has no telemetry. To pair with the Mac app it uses your computer's name as the device name.

LLM Host and Device Pairing All platforms

LLM Host lets one of your Macs serve its local models to your other devices: another Mac, an iPhone or iPad, or an Android phone. It is off until you turn it on.

• No VoxyAI server in between: with the free apps, devices connect directly to the host Mac.
• Encrypted end to end: connections use TLS between the device and the host. The host's certificate is pinned when you pair, and each paired device signs in with its own key, so only devices you paired can connect.
• Pairing: you pair by scanning a QR code shown on the host Mac. The camera is used only to read that code; no photos or video are saved.
• What is exchanged: your prompts, chat messages, and attachments go to the host, which runs the model and sends back the answer. Anything the host keeps stays on that Mac, under your control. For example, it keeps a short log of recent connections (time, device, request type, status, and size) and adds the requests to its usage dashboard.
• Connection modes: on your local network, the host announces itself with Bonjour using the Mac's name. With Tailscale, traffic travels over your own Tailscale network and Tailscale's privacy policy applies to that service. With port forwarding, the host is reachable from the internet on the port you choose, and VoxyAI looks up your public IP address for you by contacting api.ipify.org or ifconfig.me.
• Control: you can revoke any paired device from the host at any time, and a device can unpair from its side.

Update Checks macOS

VoxyAI for Mac regularly checks with our update server (updates.voxyai.io) for a new version. The check contains no identifier, settings, or usage data. Like any web request, it reveals your IP address and standard request headers, including the app's build number and your macOS version. If you choose to install an update, the installer is downloaded to your Downloads folder. The iPhone, iPad, and Android apps are updated through the App Store and Google Play.

Managed Devices

macOS Organizations can configure the free app with standard MDM managed preferences in the com.voxyai.VoxyAI domain, or with a local configuration file. VoxyAI reads these settings on the Mac; nothing is sent to us or anywhere else.

iPhone & iPad The app reads the standard managed app configuration that your organization's MDM provides, on the device only.

Enterprise Plan Coming soon

We are building a paid Enterprise plan for teams. Unlike the free apps, it will include online services that we operate, and those services will store data for the organizations that subscribe. Depending on the features an organization uses, this may include:

• Account and billing details: the organization's name, the names and email addresses of its administrators, and the information needed to bill the subscription.
• Users and devices: the people and devices the organization enrolls, such as names, email addresses, device names, and the identifiers used to pair devices with the company host Mac.
• Shared content: content the organization chooses to share with its team, such as its shared knowledge base and shared projects.
• Service records: logs needed to run, secure, and support the service.

We will process this data on behalf of the subscribing organization, under its agreement with us, and only to provide the service. We will not sell it, use it for advertising, or use it to train AI models. The free apps are not affected: if you do not use the Enterprise plan, nothing in this section applies to you. We will update this policy with full details before the plan launches.

Permissions

Each permission is requested only when you use the feature that needs it, and you can revoke it at any time in your device's settings.

macOS macOS

• Microphone and Speech Recognition: dictation.
• Accessibility: to paste results into the app you are using, copy the text you select for rewriting, and detect the active app.
• Screen Recording: Screen Context Awareness only.
• Automation (Apple Events): to work with Mail and Messages.
• Full Disk Access: to read your Messages conversations, only if you use Messages automation.
• Calendar and Contacts: calendar automation, Meeting Prep, and showing contact names.
• Camera: to scan a pairing QR code from another Mac.
• Local Network: LLM Host and pairing.

iPhone & iPad iPhone & iPad

• Microphone and Speech Recognition: dictation.
• Camera: to scan the pairing QR code from your Mac.
• Local Network: to find and connect to a paired Mac.

Android Android

• Microphone (Record Audio): dictation.
• Camera: to scan the pairing QR code from your Mac. The code is read on the phone with Google ML Kit, which Google says may send it performance and usage metrics and basic device and app information.
• Internet and network state: model downloads, connecting to a paired Mac, and checking whether a VPN such as Tailscale is active. The app also checks whether the Tailscale app is installed.

Our Website

Our website at voxyai.io has no analytics, advertising, or tracking.

• Language cookie: if you choose a language, we store that choice in a cookie for one year.
• Hosting and page resources: like any website, our hosting provider receives standard request information such as your IP address and browser. Some pages load styling code from cdn.tailwindcss.com, which also receives that request information.
• Contacting us: if you email us or use a contact form, we receive what you send and use it only to respond.

Third Parties

We do not sell or share your personal information, and we do not use it for advertising. Depending on the features you use, your device may contact these third parties, each under its own privacy policy:

• Apple: speech recognition on iPhone and iPad, Apple Intelligence, and the App Store. Privacy Policy
• Google: Android speech recognition (when Google provides it), Gemini Nano through AICore, ML Kit, and Google Play. Privacy Policy
• Hugging Face: model downloads. Privacy Policy
• GitHub: the Ollama runtime download on Mac. Privacy Statement
• Ollama: Ollama model downloads on Mac. Privacy Policy
• Tailscale: only if you connect to a host Mac over Tailscale. Privacy Policy
• ipify and ifconfig.me: a public IP address lookup, only when you choose port forwarding for LLM Host on Mac.
• Services you add: remote MCP servers you configure, and any download address you enter.

Data Retention

• Voice audio: not saved by VoxyAI.
• Data stored on your devices: chats, clipboard history, memories, Knowledge index, settings, and downloaded models stay until you delete them or uninstall the app. Clipboard history keeps the most recent items up to the limit you set.
• Screen context: kept in memory for at most 30 seconds.
• Messages you send us: kept as long as needed to help you, then deleted.
• Enterprise plan data: kept while the organization's subscription is active, then deleted as described in its agreement with us.

Security

On the Mac, clipboard history, chat history, memories, MCP server settings, automation policies, workflows, and automation records are encrypted with AES-256-GCM using a key stored in your Keychain. Pairing uses TLS with certificate pinning and per-device keys. Model downloads and update checks use HTTPS. No system is perfectly secure, and data on your device is only as safe as the device itself, so use a device passcode and keep your software up to date.

Children's Privacy

VoxyAI is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us so we can delete it.

Your Choices

• Turn Clipboard History, User Memory, Knowledge, Screen Context Awareness, Screenshot Renamer, Automation, MCP, and LLM Host on or off in Settings.
• Delete conversations, clipboard items, and memories in the app, or uninstall the app to remove its data from that device.
• Revoke paired devices from the host Mac, or unpair from the device.
• Revoke permissions in your device's settings at any time.
• On Android, use offline speech recognition if your phone offers it, and choose whether Android backs up app data.
• On our website, block cookies in your browser; the site still works and follows your browser's language.

Your Rights

Because the free apps keep your data on your own devices, you can view, change, and delete it yourself, and we cannot access it. If you use VoxyAI through your organization's Enterprise plan, your organization controls the data stored with that service, so please send requests about it to your organization; we will help them respond. Depending on where you live, you may have rights to access, correct, or delete personal information we hold, such as messages you sent us, or to object to its processing. To make a request, email us.

Changes to This Privacy Policy

We may update this policy as VoxyAI changes. Before the Enterprise plan launches, we will update this policy with the full details of the data it stores, where it is stored, and the service providers we use. We will revise the "Last Updated" date at the top when we do.

Contact

VoxyAI is developed by Xavier Device Management LLC. If you have questions about this policy or a privacy request, email support@voxyai.io.