Privacy Policy

LenvX AI (“LenvX,” “we,” “us”) is a privacy-first on-device AI application for iOS, iPadOS, and macOS. This Privacy Policy explains what information we collect (very little), how we use it, and your rights.

The foundational principle of LenvX is minimum data. By default, zero personal data is collected. The architecture enforces this: all language model inference runs locally on your device using Apple MLX; chat messages are never transmitted to any server.

By default: nothing. LenvX does not collect, transmit, or store any personal information unless you explicitly enable optional telemetry.

Optional telemetry (opt-in only): If you enable telemetry in Settings, we receive only:

• Anonymous app launch counts
• Model family used (e.g., “Qwen2.5”) — never the model name or weights
• Feature category usage (e.g., “Tools”) — never content

These are coarse aggregate counts. No device identifiers, no Apple ID, no IP address, no prompt content, no output content, and no chat history are ever included — even with telemetry enabled.

You can disable telemetry at any time from Settings → Privacy → Telemetry.

All language model inference is performed exclusively on your device using Apple’s MLX framework. This means:

• Your prompts are processed locally and are never sent to any server.
• Model outputs are generated on your device and are never uploaded.
• Chat history is stored locally and encrypted at rest.

Local encryption: Messages are encrypted using ChaChaPoly (Apple CryptoKit) with a per-install key derived and stored exclusively in the iOS/macOS Keychain. The Keychain entry is marked non-exportable and protected by the device passcode.

The only outbound network activity LenvX initiates is downloading model weight files from Hugging Face (huggingface.co and cdn-lfs-us-1.huggingface.co). These requests:

• Use system TLS 1.2+ with the system certificate trust store.
• Include only standard HTTP headers (no user identifiers are added).
• Download only the specific model files you request.

A strict host allowlist is enforced within the app. No other domain can be contacted by the inference or chat subsystem.

Pro / Hybrid Cloud mode: If you configure a custom compatible endpoint (Pro feature), your messages are sent to the endpoint URL you specify. Your API key is stored in Keychain and never logged. We have no visibility into what you send to your chosen endpoint.

Subscriptions (Pro Monthly, Pro Yearly) and the Lifetime purchase are processed entirely by Apple through StoreKit. We receive:

• A receipt token used for on-device entitlement validation only.
• No payment details, credit card numbers, or billing information.
• No Apple ID email address or personal information.

For refunds or billing issues, please use Apple’s Report a Problem tool.

LenvX interacts with the following third-party services:

• Apple — StoreKit (IAP), Speech framework (on-device transcription), AVSpeechSynthesizer (on-device TTS). Apple’s own privacy policies govern their frameworks.
• Hugging Face — Model weight file hosting. Downloads are anonymous CDN requests. See huggingface.co/privacy.

We do not use advertising networks, analytics SDKs, or social media trackers.

Because we do not collect personal data, there is nothing for us to retain, delete, or manage on our servers.

Data stored locally on your device (chat history, saved outputs, settings) is under your full control. You can delete it at any time from Settings → Data → Delete All Data, or by uninstalling the app.

Under applicable privacy laws (including GDPR, CCPA, and similar regulations), you may have rights to access, correct, delete, or port your personal data. Since we do not collect personal data from you, these rights are effectively satisfied by design.

If you have any privacy questions or concerns, please contact us at the address in Section 11.

LenvX is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be communicated via App Store release notes or an in-app notice. The “Last updated” date at the top of this page reflects the most recent revision.

Continued use of LenvX after a policy update constitutes acceptance of the updated terms.

For privacy questions, requests, or concerns, please email us at labs@lenvx.com.