Fennix App Privacy Policy

1. Core Architecture & Local On-Device AI Execution

Fennix is fundamentally an on-device artificial intelligence runner powered by native C++ (llama.cpp) and Google AICore (Gemini Nano) running directly on your phone's processor (CPU, GPU, and NPU).

• Zero Prompt Egress by Default: During local model operation, all tokenization, context evaluation, tensor computation, and text generation happen exclusively in your device's memory. Your prompts, custom system instructions, chat history, and generated responses are never transmitted to VX9Studio or any remote cloud server.

• Air-Gapped Operation: Once model weights are stored on your device, Fennix operates with full functionality in airplane mode or in environments with zero internet connectivity.

• No Surveillance or Profiling: We do not log, inspect, analyze, or build user profiles based on your conversations, prompts, or AI queries.

2. Optional Cloud AI Services (Opt-In)

While Fennix is designed primarily as an offline AI engine, users may optionally connect to external cloud AI providers (such as Google Gemini via Generative AI SDK or Groq API).

• Explicit Opt-In: Cloud inference is strictly optional. Cloud endpoints are contacted only when you explicitly select a cloud-powered model for a chat session.

• Encrypted Transmission: When a cloud model is active, user prompts and relevant conversational context are transmitted directly and securely over HTTPS/TLS encryption to the selected provider's API.

• User-Provided API Keys: If you enter your own third-party API keys (e.g. Groq or Google AI Studio keys), they are stored locally on your device within Android's private, encrypted DataStore. They are used exclusively to authenticate direct requests to the respective provider and are never transmitted to VX9Studio.

• Provider Privacy Terms: Cloud AI interactions are subject to the privacy policies of the respective providers (Google Privacy Policy and Groq Privacy Policy). You may switch back to offline local models at any time.

3. Information We Collect and Store

We believe in minimal data footprint. Here is how your information is handled:

• Chat Histories & Prompt Templates: Saved locally on your device in an SQLite database using Android Jetpack Room DB. This information remains solely on your device and is never synchronized to cloud servers without your explicit action.

• User Preferences: Settings such as active model, sampling temperature, top-p, context length, and visual appearance are saved locally in Android Jetpack DataStore.

• Downloaded Model Files (GGUF): Quantized open-source model weights you choose to download are stored in the app's private sandbox storage directory. You retain complete control to delete models at any time to free device storage.

• Document Attachments (PDF Q&A): When you import a PDF document for analysis or question-answering, the document is parsed locally on your phone using PDFBox. Extracted text is processed in device RAM and is not sent to external servers unless you are using an optional cloud model.

• Optional Account Data: You can use Fennix completely anonymously as a guest without creating an account. If you choose to sign in using Google Sign-In (via Android Credential Manager and Firebase Auth), we collect your name and email address solely to maintain your account identity and verify active subscription entitlements across your devices.

• App Integrity Verification: We utilize Firebase App Check and the Google Play Integrity API to cryptographically verify that requests originate from an authentic, unmodified version of the app to prevent piracy and abuse.

4. Android Device Permissions & Transparency

Fennix requests only the minimal permissions required to deliver its core features:

• RECORD_AUDIO (Microphone): Used strictly when you tap the microphone button to dictate prompts via voice. Audio transcription is processed on-device using Android's built-in SpeechRecognizer. Fennix never records audio in the background and never uploads your voice recordings to any server.

• INTERNET, ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE: Required to download open-source model files (GGUF weights) from public repositories (such as Hugging Face), verify Google Play subscriptions, perform user-requested web searches via Jsoup, and communicate with cloud AI providers if explicitly enabled by the user.

• FOREGROUND_SERVICE & FOREGROUND_SERVICE_DATA_SYNC: Large AI model files range from 1GB to over 4GB. Fennix uses a foreground service (ModelDownloadService) with a persistent notification to ensure Android does not terminate active downloads when the app is in the background. The notification displays real-time progress and provides instant pause/cancel controls.

• POST_NOTIFICATIONS (Android 13+): Used to display foreground model download progress and optional user-scheduled reminders or app update announcements.

• RECEIVE_BOOT_COMPLETED: Used to restore any user-scheduled reminders or notifications following a device reboot.

• VIBRATE: Provides subtle haptic feedback during UI interactions, speech recording transitions, and token generation.

• BILLING (com.android.vending.BILLING): Enables Google Play Billing to manage optional in-app purchases and subscriptions.

• Zero Advertising Tracking (AD_ID Removed): We have explicitly stripped the Google Play Advertising ID permission (com.google.android.gms.permission.AD_ID) from our manifest. Fennix contains zero advertising SDKs, zero cross-app ad tracking, and serves zero ads.

5. In-App Purchases & Subscriptions

Fennix offers optional subscriptions and premium feature access processed through Google Play Billing and the Adapty SDK (io.adapty:android-sdk).

• Payment Processing: All financial transactions are securely handled directly by Google Play. VX9Studio never receives, processes, or stores your credit card numbers, bank information, or billing address.

• Subscription Management: Adapty receives anonymized transaction tokens to validate your purchase receipt and unlock entitlement features. You can manage or cancel your subscription at any time directly through the Google Play Store under Subscriptions.

6. Data Sharing & Third Parties

We do not sell, monetize, rent, or trade your personal data, chat history, or device information to third parties or advertising brokers.

Data is shared only with trusted infrastructure providers necessary for optional services:

• Google Play & Firebase: Authentication, Play Integrity verification, and Firestore (for optional account entitlement syncing).

• Adapty: Validation of Google Play in-app purchases and subscription receipts.

• Cloud AI Providers (Google AI / Groq): Only if you explicitly configure and select cloud models for inference.

• Public Model Hosts (e.g. Hugging Face): Direct file downloads of open-source models initiated by you.

7. Data Retention & Deletion Instructions (Google Play Compliant)

You have complete autonomy and control over all data created or managed within Fennix:

How to delete local data on your device:

• Delete Individual Chats: Swipe or select any chat in the conversation history list and tap Delete to immediately wipe the chat and its context from the local Room database.

• Delete Model Files: Open Settings > Model Manager to delete any downloaded GGUF model files to immediately reclaim storage space.

• Complete Local Wipe: Go to Android Settings > Apps > Fennix > Storage and tap 'Clear Data' or simply uninstall the app. All local databases, downloaded models, preferences, and cached files are erased immediately and irreversibly.

How to delete your account and cloud data:

If you signed in with Google, you have the right to request immediate and complete deletion of your account and all associated cloud records:

1. In-App Deletion: Open Fennix > Settings > Account > Delete Account and confirm the prompt. This immediately and irreversibly deletes your Firebase Auth account and all associated cloud Firestore records.

2. Email Request: If you have uninstalled the app or cannot access your account, you can email us at hello@vx9studio.com with the subject line 'Fennix Account Deletion Request'. Our team will verify and permanently purge your cloud account records within 48 hours.

Active database records are deleted immediately upon confirmation. Encrypted disaster-recovery backups are purged within 30 days.

8. Data Security & Encryption

We implement industry-standard administrative, physical, and technical safeguards to protect your information:

• All external network communications (model downloads, authentication, optional cloud AI requests) use HTTPS/TLS encryption in transit.

• Local files and databases are stored in Android's private internal storage sandbox, isolated from other applications on your device.

• API keys entered by the user are stored in private encrypted preferences using Jetpack DataStore.

9. Children's Privacy

Fennix is not directed to individuals under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal identifiable information from children. If we become aware that a child under 13 has provided personal data without parental consent, we will promptly delete that data from our systems.

10. Your Privacy Rights (GDPR, CCPA & Global)

Depending on your jurisdiction, you may have specific statutory rights regarding your personal information, including the right to access, rectify, export, or delete your data, as well as the right to restrict or object to certain processing.

Because Fennix operates with a local-first architecture where your chats and AI interactions remain exclusively on your device, you possess direct and immediate custody over your data at all times. To exercise any statutory rights regarding account metadata, email us at hello@vx9studio.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect improvements to our app, changes in legal obligations, or new features. When changes are made, we will update the 'Last Updated' date at the top of this policy and notify users via an app notice or on our website.

We encourage you to review this Privacy Policy periodically to stay informed about our data protection practices.

12. Contact Us & Developer Information

If you have questions, feedback, or concerns regarding this Privacy Policy or our privacy practices, please contact the developer:

• Developer: VX9Studio

• Email: hello@vx9studio.com

• Website: https://vx9studio.com

• Location: Colombo, Sri Lanka