Privacy Policy

Notices

Corrections and clarifications published by NYX LIMITED. This compact page does not maintain a second hand-edited transcription of the policy: the exact app-supplied PDF is linked below.

This is the compact legal site. It keeps Nyx AI’s legal documents publicly available alongside the full product site. These are point-in-time app-supplied copies; the dated notices above state the current position, and the document bundled with your installed build governs that build.

The exact app-supplied Privacy Policy v1.42 is available in the PDF below, and The notices on this compact page add current website and distribution-status clarifications; they do not change the app policy. The version included with your installed application prevails if versions differ. This page is static: it sets no cookies and loads no scripts, analytics, or external resources.

Getting Nyx AI, and the scope of this page. This site publishes Nyx AI’s legal documents; the full product site follows. Nyx AI is published on the Microsoft Store, and this website offers no direct download of its own. References in the exact policy to Microsoft Store or direct-download copies describe processing for a copy obtained through either channel. Two wordings in the point-in-time policy have moved on: hosted Ollama Cloud is not used for semantic embeddings (those endpoints expose no embedding model), and where the policy says “code mode” the current interface name is Nyx AI Lab. Neither changes any processing or legal term. Where the point-in-time policy carries a dated availability statement (“as of 3 August 2026…”), this note is the current position and governs; the exact PDF retains the point-in-time wording supplied with the app.

Corrections shipped in app version 1.5.493. Wordings that earlier notices on this page flagged have now been corrected in the app and in the documents published here. Prefer-local routing is described as a preference with cloud fallback rather than an egress block, and the nonexistent “local-only” routing mode is gone. Ollama Cloud models are classified as off-device everywhere, including the privacy sanitizer and the model labels. The Threat Model and Security Policy restate two limits a documentation revision had trimmed: one approval for repository-controlled execution covers that workspace for the rest of the session, and a recorded permission whose object Windows reports as absent does not block sandboxed execution. The documents on this page are the staged 1.5.493 versions. Distribution channels can update on different schedules; the copy bundled with your installed build governs that build. Recorded 21 August 2026.

.nyx/rules.md is not generally unreadable. Brokered file and search tools do not expose that control file, and recognized direct model-authored shell-write forms are refused. A literal shell read or copy-from command can still read it when such a command is allowed, and its rules can be supplied to the model as instructions. This is not an operating-system read-denial guarantee. Recorded 20 August 2026.

Website donation replay marker. The current website creates a random per-donation request marker in your browser. It remains in page memory until a successful redirect, retry exhaustion or page closure, and is replaced when a later submission uses a different amount or language. The server uses it in a 15-minute retry window, sends it to Cloudflare Turnstile’s verification endpoint as an idempotency key, and sends it to Stripe as the Checkout idempotency key. For about five minutes, it can also be stored as the value of a short-lived hashed Turnstile-token replay record. It is not an email address, Turnstile token or app telemetry identifier. This notice supplements the point-in-time retention table in the exact policy. Recorded 20 August 2026.

Website waitlist cooldown marker. The current website derives its short-lived email cooldown key with a keyed HMAC-SHA-256 pseudonym. Upstash may process that pseudonymous personal data when the shared limiter is configured; neither the raw address nor a reversible unkeyed email hash is stored in the cooldown key. Duplicate submissions receive the same accepted response as a new request.

Other legal and compliance documents: Security Policy, Threat Model, Notices, open-source compliance, third-party licences, and commercial-licence audit.

Inventory provenance. The third-party and commercial-audit files linked here are the exact versions carried by the locally staged, signed app version 1.5.493 package. The third-party summary also uses older browser wording: Nyx AI first tries a usable installed or cached Chrome, Edge or Chromium engine. Chrome Headless Shell may be downloaded only if none launches, or when you explicitly choose the download action, after approval in a native Windows dialog.