Onixphere Privacy Policy

Onixphere is a desktop app for Windows made by Rida Mehboob Pasha Desai, trading as Onixphere (“we”, “us”). This policy explains what information the app handles, where it goes, and what your choices are.

The short version

• Your chats, notes, Library, Memory and files stay on your computer. We cannot see them.
• When you send a message, it goes straight from your computer to the AI provider you chose. It does not pass through us.
• The app contacts us only to check your licence and to look for updates.
• The app has no analytics, no tracking, no advertising and no automatic crash reports.

1. What stays on your computer

Onixphere stores everything you create in it in a folder on your own computer (%LOCALAPPDATA%\Onixphere). That includes:

• your chats, CoAgent tasks, notes and Memory;
• your Library, including the copy of each document you keep in it;
• the files you attach or the app creates;
• your settings and profiles;
• the embeddings the app builds for Recall, which are made on your computer by a model bundled with the app;
• the app’s log files;
• the cookies and history of websites you open in the browser pane.

API keys you enter are stored encrypted by Windows, tied to your Windows account.

None of this is sent to us. You can back it up from inside the app, and you can delete it at any time, either by deleting that folder or by choosing to delete your data when you uninstall the app.

2. What goes to AI providers you choose

To answer a message, the app sends it to the AI provider you have set up - for example OpenAI, Anthropic, Google (Gemini) or xAI (Grok) - using your own account and API key. The request includes your message and whatever the app adds to it for that reply, such as earlier messages in the chat, notes, Library passages or Memory that Recall judged relevant, attached files, and pages or passages you shared from the browser pane or the Viewer.

The app also sends text to that provider when it does something for you with a model: titling a chat or a note, summarising what you send to Notes, or building Memory with Consolidate, which sends the chats it reads. In a CoAgent task, it sends what CoAgent reads to do the work: files in the folders you gave it, the output of commands it runs, and pages it reads or takes screenshots of in the browser pane.

If you turn on web search, the provider runs the search for you.

Each provider handles this data under its own privacy policy, which you agreed to when you created an account with it. We do not receive a copy.

If you use a local model through Ollama, your messages are processed on your own computer and are not sent anywhere.

3. Websites and downloads

• Browser pane. Websites you open are contacted directly, as in any browser, and can see the information a browser normally sends, such as your IP address. A search typed into the address bar is sent to Google. The same applies to pages CoAgent opens in the browser pane for a task.
• Ollama and local models. If you ask the app to install Ollama or a model, they are downloaded from Ollama’s servers (ollama.com).
• CoAgent packages. If you approve CoAgent installing a Python package while working on a task, it is downloaded from the Python Package Index (pypi.org).

4. What we receive

Licence checks. When you activate a licence, and from time to time after that, the app sends your licence key and an identifier for your device to Polar, our payment and licensing provider. It also sends your computer’s name, as set in Windows, so that the customer portal can show you which computers the key is active on. This is used only to confirm that the key is valid, to count the devices it is active on, and to let you manage them. The app checks again about once a week. The device identifier is derived from the ID Windows gives your computer when it is installed, and is scrambled before it is sent, so the ID itself never leaves your computer. It does not contain your name or files.

The trial. To make sure each device gets one trial, the app keeps a record of when the trial started on your computer. That record stays on your computer; nothing about the trial is sent to us or to Polar.

Update checks. The app regularly asks downloads.onixphere.com, which is hosted by Cloudflare, whether a newer version exists, and downloads it if one does. As with any web request, that server sees your IP address and the version being requested. No other information is sent.

Purchases. When you buy a licence, Polar acts as the merchant of record. It collects your name, email address, billing address and payment details, and handles them under its own privacy policy (https://polar.sh/legal/privacy). We receive your name, email address, country and the details of your order, so that we can provide your licence, send you receipts and answer support requests. We never see your full card details.

Feedback and support. If you use Send feedback, the app gathers its log files into a zip on your computer. Nothing is sent unless you choose to attach that file to a message to us. Logs record what the app did and any errors, and can include file names and folder paths. If you email us, we receive what you send.

5. Why we use it, and on what basis

We use the information in section 4 only to:

• provide and check your licence (to perform our contract with you);
• deliver updates (in our legitimate interest in keeping the app working and secure);
• answer your support requests (to perform our contract, or with your consent);
• keep records the law requires, such as for tax.

We do not sell your information, use it for advertising, or use your content to train AI models.

6. How long we keep it

Order and licence records are kept for as long as your licence is active, and then for as long as tax and accounting law requires. Support emails and any logs you send are deleted once your request is resolved, and in any case within 12 months.

7. Your rights

Depending on where you live (for example under the GDPR in the EU and UK), you may have the right to see the information we hold about you, have it corrected or deleted, object to how we use it, or ask for a copy in a portable form. To use any of these rights, email support@onixphere.com. You can also complain to your local data protection authority.

8. Children

Onixphere is not directed at children under 16, and we do not knowingly collect their information.

9. Changes

If we change this policy, we will update the date at the top and publish the new version at https://onixphere.com. If a change affects how your information is used, we will tell you in the app or by email before it takes effect.

10. Contact

Onixphere, United Kingdom - support@onixphere.com