Legal Document

Privacy Policy

Last updated: December 19, 2024

Effective: December 19, 2024

Our Privacy Commitment

AI Hub is designed with privacy at its core. We believe you should have complete control over your data. Your API keys are encrypted locally, your conversations stay on your device, and we never sell your personal information.

This Privacy Policy describes how byteoxo ("we," "us," or "our") collects, uses, and shares information when you use AI Hub ("the App"). We are committed to protecting your privacy and ensuring transparency about our data practices.

1. Data Collection Practices

1.1 Information You Provide

Data TypePurposeStorage Location
API KeyAuthentication with OpenRouterEncrypted local storage
Chat MessagesConversation historyLocal device storage
Model PreferencesUser settingsLocal device storage
App SettingsPersonalizationLocal device storage

1.2 Automatically Collected Information

  • Device Information: Device model, operating system version, unique device identifiers (for crash reporting only)
  • Usage Analytics: App feature usage, session duration, button interactions (anonymized)
  • Crash Reports: Technical logs when the app encounters errors
  • Performance Data: App load times, response times (aggregated)

1.3 Information We Do NOT Collect

  • Contents of your conversations with AI
  • Your API key in plain text
  • Personal identification documents
  • Financial information
  • Precise location data
  • Contact lists or phone records

2. Local Storage vs Cloud Data

2.1 Local-First Architecture

AI Hub is designed with a local-first architecture. This means:

  • Your chat history never leaves your device
  • API keys are encrypted using Android's EncryptedSharedPreferences
  • Settings and preferences are stored locally
  • No cloud backup of conversation data

2.2 Data That Leaves Your Device

When you send a message, the following data is transmitted to OpenRouter and the selected LLM provider:

  • Your message content (to generate a response)
  • Your API key (for authentication)
  • Model selection and parameters
  • Conversation context (if enabled)

⚠️ Important: Data transmitted to OpenRouter and LLM providers is subject to their respective privacy policies. We encourage you to review OpenRouter's privacy policy and the policies of the AI model providers you use.

3. Third-Party Data Sharing

3.1 Service Providers

ProviderPurposeData Shared
OpenRouterAPI Gateway for LLMsMessages, API key, model selection
LLM ProvidersAI Response GenerationMessage content (via OpenRouter)
Google PlayApp DistributionStandard store analytics
Firebase CrashlyticsCrash ReportingAnonymized crash logs

3.2 We Do NOT Share Data With

  • Advertising networks or ad platforms
  • Data brokers or data resellers
  • Social media platforms
  • Marketing agencies

3.3 Legal Disclosures

We may disclose information if required by law, court order, or government request, or when necessary to protect our rights, safety, or the safety of others.

4. Your Privacy Rights

4.1 Universal Rights

All users have the right to:

  • Access: Know what data we collect and how it's used
  • Deletion: Delete your local data by uninstalling the app
  • Portability: Export your chat history (feature in development)
  • Objection: Opt-out of analytics collection

4.2 For European Users (GDPR)

Under the General Data Protection Regulation, EU residents have additional rights:

  • Right to rectification of inaccurate personal data
  • Right to restrict processing in certain circumstances
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process data based on legitimate interests (app functionality) and your consent (analytics).

4.3 For California Residents (CCPA/CPRA)

California residents have the right to:

  • Know what personal information is collected and disclosed
  • Delete personal information held by businesses
  • Opt-out of the sale or sharing of personal information
  • Non-discrimination for exercising these rights

Notice: We do not sell or share personal information as defined under CCPA/CPRA.

4.4 For Users in China (PIPL)

Under the Personal Information Protection Law of the People's Republic of China, you have the right to:

  • Know and decide about the processing of your personal information
  • Restrict or refuse processing (except as required by law)
  • Access and copy your personal information
  • Request correction of inaccurate information
  • Request deletion when processing purposes are achieved
  • Withdraw consent at any time
  • Request explanation of personal information processing rules

5. Data Retention and Deletion

5.1 Local Data Retention

  • Chat History: Retained until you delete conversations or uninstall the app
  • API Key: Stored until you remove it or uninstall the app
  • Settings: Retained until you reset them or uninstall the app

5.2 Server-Side Data Retention

  • Analytics: Aggregated for 24 months, then deleted
  • Crash Logs: Retained for 90 days
  • Support Tickets: Retained for 3 years for legal compliance

5.3 How to Delete Your Data

1

Delete Individual Conversations

Swipe left on any chat in the History tab and tap delete

2

Clear All Data

Go to Settings → Clear App Data to remove all local data

3

Complete Removal

Uninstall the app to remove all data from your device

6. Children's Privacy

6.1 Age Requirements

AI Hub is not intended for children under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

6.2 COPPA Compliance

In compliance with the Children's Online Privacy Protection Act (COPPA), we:

  • Do not knowingly collect personal information from children under 13
  • Will delete any such information upon discovery
  • Encourage parents to monitor their children's online activities

6.3 Parental Rights

If you believe your child has provided us with personal information, please contact us at privacy@byteoxo.io. We will promptly delete such information from our records.

7. Cross-Border Data Transfers

7.1 International Data Flows

When you use AI Hub, your message data may be processed by OpenRouter and LLM providers in various countries, including the United States. These transfers are necessary to provide you with AI chat functionality.

7.2 Safeguards

For cross-border data transfers, we implement:

  • Standard Contractual Clauses approved by relevant authorities
  • Data processing agreements with all service providers
  • Technical measures (encryption in transit and at rest)
  • Regular security assessments of data handling practices

7.3 China-Specific Requirements

For users in China, in compliance with the Cybersecurity Law and Data Security Law:

  • We disclose that your message data is processed outside China through OpenRouter
  • By using the app, you consent to this cross-border data transfer
  • We implement security measures in accordance with Chinese cybersecurity standards
  • No "important data" as defined by Chinese law is collected or exported

8. Security Measures

8.1 Technical Safeguards

  • API keys encrypted using Android's EncryptedSharedPreferences
  • TLS 1.3 encryption for all data in transit
  • No plain-text storage of sensitive information
  • Regular security updates and vulnerability patching

8.2 Organizational Measures

  • Minimal data collection principle
  • Access controls and authentication requirements
  • Regular security audits and code reviews
  • Incident response procedures

8.3 Your Role in Security

You can help protect your data by:

  • Enabling device screen lock and biometric authentication
  • Keeping your device's operating system updated
  • Not sharing your device with untrusted individuals
  • Regularly updating AI Hub to the latest version

9. Policy Updates

We may update this Privacy Policy from time to time. When we make changes:

  • We will update the "Last Updated" date at the top of this policy
  • For material changes, we will notify you through the app or via email
  • Your continued use of AI Hub after changes indicates acceptance
  • We encourage you to review this policy periodically

Previous versions of this Privacy Policy are available upon request.

Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights:

We will respond to all privacy-related inquiries within 30 days.