Privacy Policy for Pix

Overview

Pix is a native iOS client for connecting to an authorized Pix host and continuing Pi sessions from an iPhone or iPad. This Privacy Policy explains how Pix handles information when you use the App.

No Deepoke Account, Advertising, or Tracking

Pix does not require a Deepoke account or sign-in. It does not include advertising, behavioral profiling, third-party analytics, or tracking SDKs. Installing Pix through TestFlight or the App Store may require an Apple Account under Apple’s own terms.

Host, Session, and Message Data

Pix connects to a Mac or Linux computer that you explicitly authorize. When you pair a device and use a workspace, Pix may transmit host and workspace identifiers, session metadata, prompts, assistant responses, thinking content, tool calls and results, extension UI requests, and files or images that you choose to send. This information is sent to your authorized host so Pi can perform the requested work.

Pi’s native session JSONL on your host is the authoritative conversation history. Pix does not operate a cloud database of your prompts, source code, files, or chat history. The iOS App may keep disposable in-memory or local UI snapshots to render the current screen; those snapshots are not a second authoritative session store.

Encrypted Connections and Relay Transport

Pix uses a direct local-network connection when available. When you connect remotely, encrypted application frames may pass through a Cloudflare relay operated for Pix. Pix’s Rust wire layer encrypts and authenticates the frames end to end before relay forwarding. The relay is designed to forward opaque frames without decrypting, storing, or logging their contents.

As with any network connection, Apple, your network provider, and relay infrastructure may process limited connection metadata such as IP addresses, timestamps, and transport health information. This metadata is used to operate and secure the connection, not to build an advertising profile. Pix does not send your host paths or message content to the relay in readable form.

Keychain and Local App Data

Pix stores device identity, trusted-host keys, pairing information, and connection settings in Apple Keychain using device-only accessibility where supported. The App may also keep temporary preferences and UI state in its local container. Removing a paired host in Pix removes its local trust record; uninstalling the App removes the App’s local data subject to Apple’s backup and restoration behavior.

Local Network, Camera, and Attachments

Pix requests Local Network access to discover and connect to Pix hosts on your network. If you choose QR pairing, Pix uses the camera to read the pairing code on the device. It does not record or upload camera video or scanned QR images.

If you choose an image attachment, Pix reads the selected image only to send it to your authorized host through the encrypted Pix connection. Pix does not scan your photo library, recognize faces, or upload images to a Deepoke server. The host and Pi may retain an attachment or other submitted content in the session or workspace according to their own operation and storage rules.

Data Retention and Deletion

Your Pi session history and files remain on your authorized host until you delete them using the host or Pi. Pix does not provide a separate cloud history to delete. You can remove trusted hosts and local App state in Pix or by uninstalling the App. Copies that you deliberately export, attach to another App, or include in an operating-system backup are controlled by the destination or backup service you choose.

Third-Party Services

Pix relies on Apple system services such as Network.framework, Keychain, camera access, and TestFlight or App Store distribution. Remote connections may use the Pix relay infrastructure hosted on Cloudflare. These providers process information under their own terms and privacy practices. Pix does not use third-party advertising or analytics services.

Children’s Privacy

Pix does not knowingly collect personal information from children. The App has no Deepoke account system and does not use prompts, files, or session data for advertising or profiling.

Changes to This Policy

We may update this Privacy Policy when Pix’s data practices change or when clarification is needed. The version, effective date, and updated date shown at the top of this page identify the applicable version.

Terms of Use

Use of Pix is also subject to Apple’s Standard Licensed Application End User License Agreement.

Contact

If you have questions about this Privacy Policy or Pix’s data practices, email support@deepoke.com.