Vixi AI (“we”, “us”) gives each person their own private AI assistant, Vixi, on the web, iPhone, Android and Mac. This policy covers the Vixi AI website, the Vixi AI apps and the computer connector. It says what we collect, why, who else processes it, and the choices you have.
What we collect
- Account data: your name, email address, password hash (never the password itself) and sign-in method.
- Device data: a name and platform for each signed-in device, its public device key, and when it was last seen. We do not collect advertising identifiers.
- Your Vixi data: conversations, memory, files, photos you attach, schedules and settings, stored inside your private instance.
- Connection tokens and saved credentials: stored encrypted in your vault (see below).
- Support reports: when you use Report a problem or report an answer, what you write, your device model and operating system version, and a screenshot only if you attach one.
- Operational data: instance status, error and crash logs, and usage counts (tokens and requests, never conversation content) used to run, secure and bill the service.
How we use it
To provide the service you ask for: run your instance, carry out your requests, keep your devices in sync, send the notifications you turn on, prevent abuse, handle support and fix problems. We do not sell your data, we do not use it for advertising, and we do not use your conversations to train AI models. The apps and the website include no third-party advertising or analytics tools and do not track you across other companies’ apps or sites.
Phone, camera, voice and computer features
The apps ask your device for each of these permissions only when you use the matching feature. You can refuse or turn any of them off in your device settings, and the rest of the app keeps working.
Location (while you are using the app). If you ask for something that needs it, such as how long it takes to leave for a meeting, the app reads your approximate or precise location once and sends it to your private instance and to the AI model provider for that request. The app does not track your location in the background.
Contacts. When you mention a person, the app looks them up in your contacts on request. The matching names, and details such as a phone number or email you ask for, are sent to your instance and the AI model provider for that request. We do not upload your address book.
Calendar. When you ask, the app reads events in a time range and can add events you ask for. The events involved are sent to your instance and the AI model provider for that request.
Camera and photos. The camera is used to scan pages or QR codes and to attach a photo to a chat. Photos you pick are the only ones the app can see. Anything you attach is stored in your instance and sent to the AI model provider if the request needs it.
Microphone and speech. Holding the orb or the mic button listens only while you hold it. On iPhone, speech is turned into text with Apple’s speech recognition, on your device when your device supports it and otherwise by Apple. In a web browser, dictation uses your browser’s own speech service, run by the browser maker. The text of what you said is sent to Vixi.
Face ID, Touch ID and passkeys. Used on your device to approve payments and sensitive actions. We never receive your biometrics.
Computer use (Vixi AI for Mac and the computer connector). If you install it and grant macOS Accessibility and Screen Recording access, Vixi can look at and operate apps on your computer. To do that it reads the on-screen text and layout of the apps you have allowed, and may take screenshots of them. Those are sent to your private instance and to the AI model provider so Vixi can decide the next step. It works only in apps on your allow list, asks before sensitive actions, refuses to type into password fields, stops after 8 hours or 30 minutes idle, and you can stop it at any time. The activity log on your computer records what was done, not the images. Do not allow apps that show information you do not want sent to an AI provider.
Browser extension. If you add Vixi AI for Chrome or Safari control, Vixi can read and act on the tabs you let it use, and the page content it reads is sent to your instance and the AI model provider.
AI model providers
To answer you, Vixi sends the parts of your conversation that the request needs, plus anything from the features above that you asked it to use (for example a calendar event, a contact’s name, your location, a photo or a screenshot), to the AI model provider configured for your account: for example Anthropic through Amazon Web Services (Bedrock), or your own Claude Code or Codex account if you connect one. Those providers process the data under their own terms and, under our agreements, do not train on it.
AI answers can be wrong, out of date or unsuitable. Do not rely on them for medical, legal, financial or safety decisions.
Who else processes your data
- Cloud hosting: Amazon Web Services runs our servers and your instance.
- AI model providers: as described above.
- Stripe: payments and subscriptions (see Payments).
- Apple and Google: app stores, device speech recognition where used, and sign-in if you choose Google.
- Services you connect (for example Gmail, Google Calendar, Slack, GitHub): Vixi sends them what you ask it to, under their terms.
- Authorities, only where the law requires it.
Vault and secrets
Passwords, API keys and OAuth tokens you give Vixi go to an encrypted vault (AES-256-GCM with per-user data keys). They are decrypted only inside your own instance when needed, every use is audited, and they are never shown to the AI model. Payment cards are saved with our payment processor, Stripe; we keep only Stripe’s reference to the card and its brand, last four digits and expiry date.
Payments
Cards and wallets are saved and charged by our payment processor, Stripe. You type card details only into Stripe’s secure fields (or Apple Pay / Google Pay); they go straight to Stripe and never reach our servers, your instance, the AI model, our logs or analytics. We keep only what we need to show and use your saved methods: a Stripe reference, the brand, the last four digits, the expiry month and year, the wallet type and a card fingerprint used to spot duplicates.
Vixi can only pay after you approve that exact payment (merchant, items, amount, currency and card) on your device with a passkey, Face ID or fingerprint, within the per-payment and monthly limits you set. For each payment we keep the request, your approval (which device or passkey approved it, never your biometrics), its status, amounts, refunds, the receipt link and an audit trail. Stripe also processes this data under its own privacy policy, including for fraud prevention. Payment and audit records are kept for as long as financial record-keeping laws require (in Canada, generally six years), even if you delete your account; everything else follows the retention rules below.
Plans and billing
When you start a paid plan, Stripe charges the card you choose for each billing period; card details stay with Stripe as described above. We keep your plan, your subscription’s status and dates (trial, renewal, cancellation), Stripe references for your customer, subscription and invoices, and invoice amounts, so we can show your plan and invoices and apply what your plan includes. Invoices and their records are kept for as long as financial record-keeping laws require.
To offer one free trial per person, we record that your account used a trial and Stripe’s fingerprint of the card used (a reference that identifies a card without revealing its number). We keep this record even if you delete your account, only to prevent repeat free trials.
Usage. To run, price and protect the service, we record how much your Vixi uses the AI models: for each request, the number of tokens in and out (including cached tokens), which model served it, its cost to us and when it happened, never the content of your conversation. You can see your own activity (tokens and requests) in Plan & billing.
Retention and deletion
Your data is kept while your account is active. Instance backups are kept for up to 30 days. You can delete saved credentials, connections, files and chats at any time in the app.
To delete your account: open Settings, choose Delete account and confirm by typing your account email. If the app tells you that deleting from the app is not available yet, or you cannot sign in, email support@tavix.dev from your account email and we will delete it. We then erase your instance, vault, files and backups within 30 days, and cancel any paid plan so it does not renew. We keep payment and invoice records, and the free-trial record, as described above.
Local data on your devices (for example the computer connector’s activity log) is removed when you uninstall the app or connector.
Security
Instances are isolated from each other, accept no inbound connections, and are reached only through our authenticated edge. Traffic is encrypted in transit. Devices are revocable at any time. No system is perfectly secure; tell us at support@tavix.dev if you find a problem.
Your rights
Depending on where you live (for example under GDPR or PIPEDA) you may have the right to access, correct, export or delete your data, and to object to some processing. Email support@tavix.dev to exercise them. We may need to confirm it is you, and we answer within 30 days.
Children and age
Vixi AI is for people 16 and older. When you create an account you confirm you are at least 16. We do not knowingly collect personal data from anyone under 16 through a personal account; if you believe a child has an account, email support@tavix.dev and we will delete it.
The one exception is a school deployment of Vixi AI for Education that a school sets up with our team. Students under 13 can use Vixi AI only that way, with the school’s consent and content filters always on. In a school deployment the school controls the student records: we use them only to provide Vixi AI to the school, take the minimum we need from the school’s learning system, and export or delete them when the school asks. Students cannot sign themselves up to a school deployment in the apps. Vixi AI is not designed for the Kids category and we do not market it to children.
Changes
We will post updates here and tell you in the app before material changes take effect.
Contact
Questions, requests or complaints about privacy: support@tavix.dev. You can also use the Support page.