Privacy Policy

Effective 24 August 2026

Summary: Xanadu Lynx stores your settings, memories, conversation history and connected-service credentials locally on your Android device. Your prompts and attachments are sent only to the AI provider you select, and only to provide the service you request.

Who we are

Xanadu Lynx (“Xanadu”, “we”, “us”) provides a voice-first Android assistant. Questions about this policy can be sent to hello@xanadulynx.com.

Information the app processes

Account and licence information: email address, licence token and subscription/entitlement status.
User content: prompts, voice transcriptions, images or files you choose to attach, and responses generated for you.
App data: settings, saved memories, reminders, conversation history and API keys or tokens you choose to add.
Device permissions: microphone, notifications, approximate or precise location, contacts, accessibility, notification access and display-over-other-apps access. Android asks for permission before access. You can revoke permissions in system settings.
Connected-service data: only data needed for an action you request, such as calendar events, email, maps/place results, Spotify data or a contact's phone number.
Purchase and diagnostic information: our payment provider processes payment details. We may receive subscription status and basic server logs needed for security, entitlement checks and troubleshooting; we do not receive full card details.

How information is used

We process information to answer requests, operate authorised phone features, remember preferences, schedule reminders, authenticate connected services, verify licences, prevent abuse, provide support and maintain security. We do not sell personal information or use your content for advertising.

AI providers and third parties

When you submit a request, relevant text, voice transcription or attachment is transmitted to the AI provider you selected (such as Anthropic, OpenAI or Google) using the API credential configured in the app. Their privacy terms apply. Actions you request may also send necessary data to the relevant service, such as Google, Spotify, maps/place providers, email or calling services. Payments are processed by Stripe. Website hosting and server functions may be provided by Vercel and other infrastructure suppliers.

Storage, security and retention

App settings, memories, conversation history and connected-service credentials are stored locally on your device in app-private storage. Network connections use HTTPS. Licence and service servers retain only information needed to operate, secure and support the service or meet legal obligations. Local app data remains until you delete it, clear app storage or uninstall the app. You can remove individual connected-service credentials in the app's settings.

Accessibility and sensitive permissions

If enabled, Android's Accessibility Service lets Xanadu read visible screen content and perform taps, typing and scrolling solely to carry out tasks you request. Accessibility data is not used for advertising and is not sold. Microphone access supports voice input. Location supports “near me”, places and route requests. Contacts access resolves a name to contact details when you ask to call or message someone. These permissions are optional and can be disabled at any time.

Your choices and rights

You can decline or revoke Android permissions, disconnect services, delete local conversations and memories by clearing app data or uninstalling, and ask us to access, correct or delete server-held personal information by emailing hello@xanadulynx.com. Depending on where you live, you may also have rights to object, restrict processing or complain to a data-protection authority.

Children

Xanadu is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes

We may update this policy as the app changes. The latest version and effective date will always appear on this page.