Elythros Ltd receives no data from the Elythros app. There is no account, no analytics, and no server of ours that the app talks to. Your conversations, documents and recordings stay in the app's own storage on your device. This page explains that in full, including the two features that can send something off the device and exactly what they send.
What happens on your device
All of the following runs locally, with no network request involved:
- Generating replies. The language model runs on your iPhone.
- Transcribing your voice. Dictation is processed on the device. The recording is deleted as soon as it has been transcribed; it is never stored and never sent anywhere.
- Speaking replies aloud. Handled by the operating system's own speech synthesiser.
- Reading and indexing your documents. Files you add are read, split into passages and indexed on the device. Text recognition on scanned pages also runs on the device. Neither the text nor the index leaves it. Removing a document deletes its index entry, and the original file is never modified.
The two features that can send data off your device
Both are switched off until you switch them on, and the app explains what each does at the point where you do.
Web search
When enabled, a component running on your phone decides for each message whether live results are needed. If they are, a derived search query — not your conversation — is sent to the search provider whose API key you supplied. Before it is sent, email addresses, phone numbers and long strings of digits are removed from it.
That provider is a third party you have chosen and contracted with directly. Their handling of the query is governed by their privacy policy, not this one. We never see the query.
Mac offload
When you pair a Mac and select one of its models, your prompt and the earlier turns the model needs for context are sent to that Mac so it can produce the reply. The Mac must read them in order to answer — which is not the same thing as your data never leaving the phone, and the app says so where you turn the feature on.
The connection goes directly to your Mac, over your own network or whatever address you point it at. It does not pass through any infrastructure operated by us, because we operate none. The Mac app does not store the prompts it answers. How that connection is secured is described separately.
What is stored, and where
- Conversations are saved in the app's private container on your device, so that your threads are still there next time. They are protected by your device's own encryption and, if you enable it, by the app lock. The app does not add a second layer of encryption on top of that.
- Documents you add and their index live in the same private container.
- Keys — your search API key and your Mac pairing key — are held in the system keychain, marked so that they do not sync to your other devices and do not travel in a backup.
- Recordings are not stored at all.
Deleting the app removes all of it. We cannot delete it for you, recover it for you, or see any of it, because none of it reaches us.
Analytics and crash reporting
The app contains no third-party analytics or crash-reporting software. It uses Apple's own on-device metrics framework and sends us nothing.
Separately, if you obtained the app from the App Store, Apple provides us with the aggregate statistics it provides to every developer — such as download counts and anonymised crash reports — and may provide crash diagnostics if you have agreed to share them with developers in your iOS settings. That data comes from Apple, is not linked to your identity, and is governed by Apple's privacy policy. We cannot use it to identify you or to see any of your content.
This website
This site sets no cookies, includes no analytics, has no forms, and loads no scripts, fonts or images from third parties. It does not ask you for anything, and stores nothing about you.
The site is hosted on Vercel, which — like any web host — processes the network requests needed to serve a page, including IP addresses, in its operational logs. We do not combine those logs with anything else or use them to build a profile of you.
Children
The app is not directed at children. A language model running on a device can produce output that is wrong or unsuitable, and the app does not filter it.
Your rights
Because we hold no data from the app or this website, most data-protection requests have nothing for us to act on — the content is on your device and under your control. The one exception is email you send us: if you write to us, we keep that correspondence in order to answer it. You may ask us to confirm what we hold, correct it, or delete it by writing to privacy@elythros.com, and we will respond within 30 days.
Changes to this policy
If a future version of the app introduces anything that sends data somewhere new, this page will say so before that version ships, and the feature will be off by default like the two above. The date at the top of this page records the last substantive change.
Contact
Elythros Ltd — privacy@elythros.com