AIVory Code for iPhone and Android: Privacy Policy

Summary

The app collects no personal data. It has no account, no analytics, no ads and no tracking. It talks only to the AIVory Code desktop app (the “daemon”) on your own computer, which you pair with the phone.

What the app sends, and where

• To your computer only. Session states, transcripts, questions, your answers and the tasks you dictate travel between the phone and your paired computer. On your own network the app uses a direct WebSocket connection. From other networks it uses an end-to-end encrypted QUIC connection (iroh). If no direct path exists, encrypted packets pass through a public relay server of the iroh project; the relay cannot read them.
• Nothing to Aivory, Inc. We run no server for the app and receive none of your data.

Permissions

• Camera: only to scan the pairing QR code. No image leaves the phone.
• Microphone and speech recognition: only while you hold the mic button, to turn your speech into text. The operating system’s speech service does the recognition (Apple on iPhone; the speech service of your device on Android, often Google). Their privacy policies apply to that audio.
• Face ID / fingerprint: to confirm risky answers. The check stays on the device; the app never sees biometric data.
• Local network: to reach your computer on your network.
• Notifications: local notifications when an agent needs you. They are created on the phone; no push server is used.

Storage on the phone

The pairing (computer address, access token, device key) is kept in the iPhone Keychain or the Android Keystore. Answers that wait for a connection are kept in the app’s private storage until they are sent. Unpairing or uninstalling the app removes them.

Children

The app is a developer tool and is not directed at children.

Changes and contact

We publish changes to this policy on this page. Questions: see our contact page. The general privacy policy covers the website and our other products.