Privacy Policy – Noxidox App

When you import a document into Noxidox, the app processes it entirely on your device. The following steps are performed without an internet connection and without transmission to external servers:

• Text extraction and segmentation into chunks
• Generation of vectors (embeddings) using Apple NLEmbedding — entirely on-device
• Storage in a locally encrypted SQLite database on your device (GRDB)
• AI-powered analysis and answering of your questions via Apple Foundation Models (iOS 26+) — entirely on-device

Art. 6(1)(b) GDPR (performance of the user agreement).

Documents, embeddings, and chat histories remain on your device until you manually delete them or uninstall the app.

If you are a Pro subscriber and enable the optional iCloud synchronisation in the app settings, the following data is synchronised between your Apple devices via Apple’s CloudKit service:

• Projects (name, settings)
• Documents (metadata and file contents)
• Text chunks and embeddings
• Chat sessions
• Chat messages

Art. 6(1)(b) GDPR.

This data is stored exclusively in your private iCloud database and is encrypted end-to-end by Apple. Noxidox never has access to your synchronised data. iCloud synchronisation is disabled by default and only becomes active when you explicitly enable it. For details on data processing by Apple, please refer to Apple’s privacy policy.

Apple's Privacy Policy

Speech Recognition (SFSpeechRecognizer / SpeechAnalysis)

The app offers optional voice input for search queries and chat messages. Speech recognition is performed entirely on-device via Apple’s SFSpeechRecognizer (or SpeechAnalysis from iOS 26). No audio data is transmitted to Noxidox servers or third parties. The following system permissions are required:

• Microphone access (NSMicrophoneUsageDescription): recording your voice
• Speech recognition access (NSSpeechRecognitionUsageDescription): on-device transcription

Speech Output (AVSpeechSynthesizer)

The app can read AI responses aloud on request. Speech synthesis is performed entirely on-device via Apple’s AVSpeechSynthesizer. No text data is transmitted to external servers.

Art. 6(1)(b) GDPR.

Noxidox allows you to scan physical documents using the device camera. All image processing is performed locally:

• The app requests camera access (NSCameraUsageDescription).
• Image processing and text recognition (OCR) is performed entirely on-device via the Apple Vision framework (VNRecognizeTextRequest).
• Captured images are only held temporarily in memory / a temporary directory until the OCR text has been extracted, and are then automatically deleted.
• No images are permanently stored or transmitted.

Art. 6(1)(b) GDPR.

The app can save generated diagrams or visualisations to your photo library on request. This requires your explicit consent via the iOS system permission (NSPhotoLibraryAddUsageDescription). No photos are read from your library — access is limited to adding new images.

Art. 6(1)(a) GDPR (consent via the permission grant).

Noxidox uses Apple’s MetricKit framework to receive system-provided diagnostic and performance data. The following data categories are collected:

• Performance metrics (CPU, memory, launch times, energy consumption)
• Crash reports (crash logs)
• Device type, iOS version, app version

• Diagnostic data is stored exclusively on your device.
• Automatic deletion after 30 days.
• No automatic transmission to Noxidox or third parties.
• In the app settings, you can view the data at any time, export it as JSON, or delete it entirely.

Independently of this, Apple itself may collect aggregated performance data if you have enabled this in your device settings under “Analytics & Improvements”. This collection is subject to Apple’s own privacy policy.

Art. 6(1)(f) GDPR (legitimate interest: app stability and quality assurance).

For subscription management, Noxidox uses Apple’s StoreKit framework. The app processes only the following status information locally on your device:

• Whether a valid Pro subscription exists (Yes/No)
• Type of active subscription (monthly / annual)
• Subscription expiry date
• Whether the 7-day trial has already been used

Art. 6(1)(b) GDPR (performance of the subscription agreement).

All payment transactions are processed exclusively by Apple Inc. via the App Store. Noxidox never has access to your payment data, credit card information, or Apple ID account details.

From iOS 26 onwards, Noxidox uses Apple Foundation Models for AI-powered document analysis and answering user queries. All AI inference is performed entirely on-device. No prompts, documents, or results are transmitted to Apple servers or third parties. Apple Foundation Models are part of the operating system and are subject to Apple’s own privacy policies.

Art. 6(1)(b) GDPR.