vui app privacy policy

1. Who we are

vui is made by FLUXIONS LIMITED, a company registered in England and Wales (company number 15887383, registered office 89 Portland Road, Hove, BN3 5DP) (“Fluxions”, “we”, “us”). We are the controller of the personal data described here. Contact: [email protected].

2. What stays on your phone

• Chat replies, dictation, and speech are generated by models running on your phone.
• Your conversations, memories, notes, Souls (personalities), and the documents in your Read library are stored only in the app on your phone. If you back up your iPhone to iCloud or a computer, Apple includes them in that backup; downloaded models are excluded.
• Microphone audio is transcribed on the device and is never uploaded. Calendar events are read and added on the device, only when you ask.
• Deleting the app deletes all of this.

3. What leaves your phone

• Web search. When the assistant searches the web, the search words it writes are sent from your phone to DuckDuckGo and Wikipedia, and it may open result pages. We do not receive them. Their own privacy policies apply. You can turn this off in Settings → Functions → Web search.
• Links. When you open or share a link, or the assistant reads a page, your phone fetches that page from its website. To show a small icon next to cited sources, the app fetches it from Google’s favicon service, which sees the site’s domain.
• Remote API (off unless you set it up). If you connect vui to your own OpenAI-compatible server, your conversation, your Soul’s instructions, and the tool results the assistant uses (such as notes or calendar events) are sent to the server you configure, under that provider’s terms. We do not receive them.
• Account (optional). vui works without an account. If you sign in with Apple or Google, sign-in is handled by our provider Clerk, and we receive your name, email address, and an account identifier.
• Feedback. Feedback you send from the app (signed in) goes to us with your device model, iOS version, and app version, linked to your account.
• Voice library. The app loads the list of voices, short samples, and the voices you pick from our API. If you are signed in, the list also includes voices you created on fluxions.ai.
• Crash reports. If the app crashes or hangs, it sends a report to Sentry (EU data region): the stack trace, device model, iOS and app version, memory figures, which model was loaded, and a random identifier for this installation. Reports carry no content from your chats or documents and no account details.
• Anonymous usage. Each spoken chat reply reports the name of the built-in voice and how many seconds of audio were produced. There is no text, audio, or identifier in it.
• Downloads. Models and voices download from our storage (Cloudflare R2, at public.fluxions.ai) and from Hugging Face. As with any download, those services see your IP address.

Crash reports and anonymous usage are only sent if you choose “Share crash reports” when you first open vui. Nothing is sent before you choose. You can change your mind any time in Settings → About → “Share anonymous usage & crash reports”, and it takes effect immediately.

4. What we don’t do

No advertising, no tracking across apps or websites, and we don’t sell or share your data for marketing. The app doesn’t access your contacts, location, or photos.

5. Why we process it (lawful bases)

• Account and voice library: to provide the service you asked for (contract).
• Feedback: to answer and act on it (legitimate interests).
• Crash reports and anonymous usage: to keep the app stable and understand how much it is used (your consent, which you can withdraw at any time).

6. How long we keep it

• Account: until you delete your account.
• Feedback: until it has been dealt with, and at most 2 years.
• Crash reports: up to 90 days.
• Anonymous usage: kept as aggregate counts. It identifies no one.

7. Who processes it for us

• Clerk: sign-in and accounts (United States).
• Sentry: crash reports (EU data region).
• Modal: runs our backend, which receives feedback and anonymous usage events (United States).
• Cloudflare: model and voice downloads, and our API gateway.

DuckDuckGo, Wikipedia, Google (site icons), Hugging Face, websites you open, and any Remote API server you configure are independent services your phone contacts directly. They are not our processors, and their own policies apply.

8. International transfers

We are based in the United Kingdom. Some of our providers process data in the United States. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

9. Deleting your data

• Delete your account in the app: Settings → your account → Delete account.
• Delete a document by swiping it left in your Read library. Delete memories and notes from their pages in Settings.
• Uninstalling vui removes everything stored on your phone.
• For anything we hold about you, email [email protected].

10. Your rights

You can ask to access, correct, delete, or export your personal data, and to object to or restrict how we use it. Email [email protected]. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

11. Children

vui is not intended for anyone under 16, and we do not knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.

12. Changes

If we change how the app uses data, we will update this page and the date at the top. Significant changes will also be shown in the app.