This Privacy Policy explains how Pyronis Inc. ("Pyronis," "we," "us," or "our") collects, uses, and shares information in connection with our chat application (“DeterminX”), website, and related services (collectively, the “Service”). It should be read alongside our Terms of Use.
Here is the short version. Every claim below is explained in detail in the rest of this policy.
We do not read, store, or recover your conversations: They are encrypted end-to-end and processed in memory only to generate replies.
We do not train, fine-tune, or improve any AI model on your conversations ever, for any purpose: There is no opt-in or opt-out setting because there is nothing to opt out of.
We never sell or share your personal information for advertising or any other purpose.
Your conversation history lives on your device encrypted, and is unlocked only with your conversation key.
No person views your conversations, and no persistent record of conversations is created either:
One exception: when web search is on (it is on by default; you can turn it off for any message), a search query written by the AI from your message is sent to our search provider for that message. See Section 6.
The information we hold about you is described in this policy. It includes your name, your email address, your subscription status, your acceptance of our notices, the account credentials described in Section 3.7, content-free usage records (Section 3.3), and, if you contact us, the support communications described in Section 3.9.
DeterminX is developed and operated by Pyronis Inc., a U.S. company. The Service is available in the United States.
If you have questions about this policy or your privacy, contact us at support@pyronis.com, or by mail at 800 East Campbell Road, Richardson, TX, USA.
Note on Apple's role: much of your account experience (sign-in, payment, subscription management) is handled by Apple under Apple's own terms and privacy policy. This policy describes only what Pyronis holds. For Apple's practices, please review Apple's privacy policy.
3.1 Account Information: When you create an account using Sign in with Apple, Apple provides us with your name (at sign-up), your email address (which, if you use Apple's private email relay, is a relay address rather than your personal email), and your subscription status (for example, whether your subscription is active).
We use this information to create and manage your account and to communicate with you about the Service. We never receive your payment details (see Section 3.2).
3.2 Payment Information: None: All purchases are processed through Apple's App Store. Your card number, billing details, and transaction handling remain with Apple under Apple's terms. Pyronis never sees or stores your payment information.
3.3 Technical Usage Records (Rate Limiting and Abuse Prevention): For each request to our servers, we record: a timestamp, the length of the exchange in tokens, the estimated cost, and a key ID (an identifier associated with your service key).
These records contain no content (no prompts, no responses, and nothing about what you asked). They cannot reveal what you said, or why a request was blocked or refused.
We use these records to rate-limit usage, prevent abuse of the Service, understand aggregate service usage and cost, and show you your own usage in the app. Each record is linked to your service key, and your service key is linked to your account. That is how the Service works: it is how we know your subscription is active, how we deliver your service key to your other devices, and how we lock your service key when your subscription ends. The records themselves never contain content.
We retain these records up to 30 days. We may purge them sooner, and we delete them no later than 30 days after they are created.
3.4 Your Conversations: What We Do NOT Collect: Your prompts and the model's responses are encrypted end-to-end and exist on our servers in working memory, as processing state (See Section 5.4).
They are never written to disk for persistent storage, and never used for any purpose other than generating and returning replies.
No persistent record of what you said is created, including the content of blocked or refused requests (The usage records described in Section 3.3 never contain content).
3.5 What We Do Not Collect at All: DeterminX does not collect: crash logs; analytics data through third-party SDKs; advertising identifiers; device fingerprints; your contacts; or your precise location.
3.6 Cookies: Our website (not the app) uses cookies and similar technologies that are necessary for the website to function, such as maintaining your session. If we ever add analytics, marketing, or other non-essential cookies to the website, we will disclose them here and give you choices about them.
3.7 Account Credentials and Your Service Key: To operate your account, we store account credentials in encrypted form: sign-in tokens issued by Apple, and your service key. Your service key is the credential that authenticates your requests to our servers and gives your account access to our AI models. We generate it for your account, it expires at the end of your paid period, and we block, revoke, or delete it based on your account standing (for example, when a subscription lapses or your account is deleted). We use these credentials to authenticate your requests, to deliver your service key to your other devices, and to revoke your sign-in when you delete your account. They never contain conversation content.
Your service key and your conversation key (Section 7) are two different things. Your conversation key is generated on your device, stored in your device's keychain, and locks and unlocks the encrypted database on your device; it is never provided to us, and we cannot detect, revoke, or reissue it. Your service key is the account credential described above; only we generate it, expire it, block it, revoke it, or delete it, based on your account standing.
3.8 Your Notice Acceptances: When you accept our notices (this Privacy Policy and our Terms of Use), we record the version you accepted and the date. This record survives account deletion (See Section 9).
3.9 When You Contact Us: If you contact us (for example, by emailing support@pyronis.com), we receive your name, your email address, and the contents of your message. We use this information to respond to your request, to maintain a history of our communications with you, and, where necessary, to resolve disputes, enforce our Terms of Use, protect the security of our systems and users, and comply with legal obligations. We may retain these communications for up to six (6) years.
We use the following information for the following purposes:
Account information:: creating and managing your account, and communicating with you about the Service.
Technical usage records:: rate limiting, preventing abuse, and understanding aggregate service usage and cost.
Your conversations:: used for generating your response and returning it to you. Not for training. Not for fine-tuning. Not for research, analytics, sharing, or product improvement.
Support communications:: responding to your requests, maintaining a history of our communications, and where necessary resolving disputes, enforcing our Terms, protecting security, and complying with law.
This section describes the automated processing your message goes through.
5.1 Automated Processing in the Response Path: Before your message reaches the AI model, it passes through automated, ephemeral processing. This may include automated classifiers that filter blocked content, route requests, or detect certain signals (for example, indications of self-harm risk).
5.2 What This Processing Is Not: It never results in human review, alerting, or flagging, and it creates no stored record. No person at our company is notified of anything in your conversation, and no system creates a persistent record of it.
5.3 Model-Level Behavior Is Not Company Monitoring: You may sometimes notice the model behave in particular ways. Here is what is actually happening:
Crisis resources: If the model includes crisis hotline information, that is the model's trained response, triggered by the automated processing in the response path. It does not mean anyone at Pyronis detected anything, was notified, or will ever know it happened.
Refusals and blocks: If a request is refused (for example, a type of image the system will not generate) that refusal came from the automated processing and the model's own behavior. No one at Pyronis saw your request, knows a block occurred, and no persistent record of it exists.
No review exists: There is no review queue, no content moderation team viewing conversations, and no persistent record that could later be reviewed.
5.4 Memory During Processing: To generate responses efficiently, the AI model holds parts of your conversation in its working memory: VRAM on our GPUs, and RAM. This memory exists for generating your responses.
Caching is performed in working memory to make later responses faster. Cache contents never flow to disk, and swap is disabled on our servers. As new requests arrive, the bounded cache fills and older entries become stale and are evicted. A server restart clears everything. At any moment, the cache holds recent processing state, never an archive of conversations.
DeterminX includes a web-search capability that is on by default, and that you can turn off for any individual message.
When web search is on:
The AI writes the exact search terms. It derives them from your message, may repeat some or all of your words, and you do not review or approve the query before it is sent.
The query is sent to one of our search providers (currently Brave Search and Parallel). The provider is selected as part of response routing, not by you, and it may vary from search to search.
The provider returns results, which are processed in the same ephemeral response path as the rest of your conversation.
Only the search query goes out. Your full message and the model's response are never sent to any provider.
We do not keep records of what you searched for. Searches are performed using our company-wide accounts with those providers, so the search providers cannot connect a search to you. We may receive aggregate usage information (such as total search volumes and costs) through our provider accounts. What the providers themselves log about searches is governed by their own privacy policies (Brave: https://safe.search.brave.com/help/privacy-policy; Parallel: https://parallel.ai/privacy-policy), which we encourage you to review.
When web search is off, nothing in this section applies: no part of your conversation is sent to any third party.
The following types of data are encrypted and stored locally on your device, in a database locked and unlocked by your conversation key.
Your conversation key. Your conversation key is generated on your device and stored in your device's keychain (the operating system's secure credential store). It never leaves your device and is never provided to us. It is entirely different from your service key (Section 3.7): your service key is the account credential that gives your account access to our AI models, and only we generate, expire, block, revoke, or delete it, based on your account standing.
Conversation history: Conversations may be manually deleted in the main conversation window. An incognito conversation is only saved while it remains open and is deleted automatically upon closing the conversation.
Memories: The AI may save short notes about you (for example, preferences or facts you have shared) to use in later conversations. The use of memories may be disabled in Settings. You can also view, edit, or delete any memory, or clear all of them via Settings.
Generated files: When you ask for a document (for example, a PDF or Word file), the app saves it to the app's folder in the Files app on your device. You can delete those files there at any time.
iCloud Backup: If iCloud Backup is enabled on your device (which is Apple's default setting) your encrypted data is backed up to iCloud automatically. Per Apple's design, these backups are zero-knowledge: Apple cannot access your conversation content, because what is backed up is your data in its encrypted form. Syncing across your devices works through a separate sync key that rides your iCloud Keychain, end-to-end encrypted; your information is never exposed to Apple or to us in readable form. You can turn iCloud Backup off or on in your device settings.
Recovery: If you lose your conversation key or your device without a usable backup, neither we nor Apple can recover your conversations. This is a deliberate feature of the design, but it means we cannot provide "restore my chats" support.
We do not sell or share your personal information for advertising or any other purpose.
No third-party analytics, ad networks, or data brokers: receive your data.
Web search:: when web search is on, we share search queries with the search provider for that message, as described in Section 6.
Service providers:: Apple handles sign-in and payments under its own terms; we do not use other third-party providers with access to your data, except the search providers described in Section 6 (who receive only search queries).
Legal process:: we comply with lawful requests and legal process. Account information, technical usage records, and support communications may be subject to legal process. Where legally permitted, we will notify you of any request.
Business transfers:: in the event of a merger, acquisition, or sale of assets, account information may be transferred as part of that transaction.
Conversations: not retained persistently: There is nothing to delete because no conversation is retained persistently.
Account data:: retained while your account is active; deleted within 30 days of account deletion.
Notice acceptance records:: when you accept our notices (this Privacy Policy and our Terms of Use), we keep a record of your acceptance, including the version and the date. This record survives account deletion.
Technical usage records:: retained up to 30 days.
Support communications:: retained as described in Section 3.9 (up to six years).
Depending on your state of residence, laws such as the California Consumer Privacy Act, the Texas Data Privacy and Security Act, and similar state privacy laws may give you rights over your personal information.
Because we hold only your account information including subscription status, your notice of acceptance record, technical usage records, and support communications, exercising your rights is straightforward:
Right to know / access:: you can request the account and usage information we hold about you.
Right to delete:: you can delete your account through the app; we remove the account information we hold within 30 days. One record survives: your notice acceptance record (See Section 9). You may also request deletion of your support communications; we may retain portions where necessary for ongoing disputes or legal obligations, as described in Section 3.9.
Right to correct:: you can correct inaccurate account information (such as your email address).
Non-discrimination:: we will not discriminate against you for exercising these rights.
To exercise any right, contact us at support@pyronis.com. We may need to verify your identity before responding. If we deny a request, you may appeal by contacting us at the same address.
The Service is for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from a person under 18, we will delete it. Contact us at support@pyronis.com.
We maintain reasonable technical, administrative, and organizational safeguards designed to protect the limited information we hold, including end-to-end encryption of conversation content, encrypted local storage on your device, and a data-minimization architecture under which our servers retain no persistent conversation content.
Limitations of our security measures. Our safeguards apply to our own systems and the information we hold. Certain aspects of your data's security are outside our control, and we cannot guarantee them, including:
Your device: Your conversation history is stored locally on your device in encrypted form, accessible only with your conversation key. If your device is compromised (for example, through malware, or through physical access while the device is unlocked) a third party may be able to access your conversations. Device security is managed by you and your device's operating system, not by us.
Your iCloud account: If iCloud Backup is enabled, your encrypted data is backed up to Apple's infrastructure. Apple cannot access your conversation content. However, the security of your iCloud account (including your Apple ID credentials and two-factor authentication settings) is managed by you under Apple's terms, and we have no access to or control over your iCloud account.
Your conversation key: Anyone who obtains it may be able to unlock your data. It is stored only in your device's keychain, never leaves your device, and is never provided to us; we cannot detect, revoke, or reissue it.
Accordingly, we cannot guarantee that your device, your iCloud account, or your conversation key will not be compromised, as these depend on your own security practices. We encourage you to use a strong device passcode, keep your operating system updated, enable two-factor authentication on your Apple ID, and safeguard your conversation key.
No internet transmission or electronic storage system is completely secure, and we cannot guarantee the absolute security of the limited information we do hold.
If you believe you have found a security vulnerability in our systems, please report it to support@pyronis.com.
We may update this policy. For material changes, we will notify you (by email or in the DeterminX app) at least 30 days before the change takes effect, and we will update the effective date above.
Because our privacy commitments are built into our architecture, a change to them would require an architectural change. If we ever made such a change, we would tell you prominently before it took effect.
Contact us at support@pyronis.com, or by mail at 800 East Campbell Road, Richardson, TX, USA.