MoxOS Privacy Policy

Effective date: October 12, 2026

MoxOS is a personal assistant app operated by Huo Life. This policy explains local processing, optional connections and user choices. MoxOS can be used without creating an account. A cosmetic gift code changes appearance and greetings; it is not an account credential.

Information on your iPhone

MoxOS can process text requests, photos, screenshots, selected files, voice commands and meeting recordings that you actively submit. Local AI processing uses models on your device. New meeting recordings default to local transcription and summary. Recording can continue with the screen locked; local AI processing needs the app in the foreground and keeps completed progress for resuming.

The app stores recordings, transcripts, summaries and conversation history on your phone according to its retention settings. It stores cosmetic preferences such as your chosen name, theme and greeting style. These preferences are not automatically supplied as personal memory to an AI model.

Personal memories are saved only through an explicit confirmation flow and stored in an encrypted local vault. An explicit portable export uses a separate recovery key; anyone with both the export and that key can read it. Import, copy and sharing are user actions. Appearance reset does not delete memories, recordings or conversations.

Optional Mac and AI services

If you pair a Mac and choose Mac processing, submitted requests, attachments or recordings may be transferred to your paired Mac. That Mac can use its configured AI service to process requests. If cloud recording summaries are enabled after the app's disclosure, transcript text is supplied through the Mac to the configured service. Data already transferred is not retracted by later switching to local mode.

A recording marked local-only is not automatically uploaded after reconnection. Local AI failure or model absence does not silently forward that local request to a cloud model. Independent optional Mac features and phone-data synchronization are separate from the local AI route.

The Mac's configured services and their privacy/retention terms can vary. Review those settings before sending private information. MoxOS cannot promise that a service configured by a user never retains data or uses it for its own permitted purposes.

Optional Internet lookups and downloads

When you enable local AI lookups and submit a supported lookup request, MoxOS sends relevant query words or a public URL to the selected lookup service. Current supported services include Open-Meteo for weather/geocoding, Apple MapKit for places, Wikimedia for encyclopedia topics and Jina Reader for public-page reading. These services receive ordinary network metadata such as IP address. Local lookup does not automatically include photos, selected personal memories or conversation history.

AI model downloads contact the model host and its delivery network, currently Hugging Face and related download hosts. Downloads do not include your recordings or conversation content. Opening source links, Maps, a browser or another app is subject to that service's policies.

Turning off lookups disables these assistant lookup requests; it does not disable iOS syncing, other explicitly enabled app features or links you choose to open.

Permissions and actions

Microphone and camera access support captures you choose. Calendar and Reminders changes require your review and Add. Optional Today and phone-data sharing can access selected Calendar, location or Health data when you authorize those sources and system permissions. Any sharing with your paired Mac depends on the app's corresponding choices. We do not use Health data for advertising.

You can manage system permissions in iOS Settings and the app's processing/sharing choices in MoxOS Settings. Avoid enabling optional sharing sources you do not want your configured agent to receive.

Sharing, diagnostics and beta testing

MoxOS does not add advertising SDKs or sell your submitted content. Copy, Share and export place selected information in the clipboard, Files or a service you choose. Those destinations, including possible system clipboard synchronization, are governed by their own settings and policies.

When distributed through TestFlight, Apple collects beta crash/usage diagnostics and makes beta feedback available to the developer according to TestFlight's terms. Feedback you submit can include screenshots or comments. We use beta feedback and diagnostics to investigate defects and improve MoxOS. Do not submit sensitive content in feedback unless you intend to share it.

Retention, deletion and security

Use the app's recording/history/memory controls to manage locally stored content. Restoring default appearance changes only cosmetic preferences. It does not erase other data. Data transferred to a paired Mac or another service has separate retention; use the relevant Mac/service deletion controls. System Calendar/Reminder entries remain in those apps unless you delete them there.

MoxOS uses iOS file protection and Keychain for relevant local files and credentials, encrypted personal-memory storage and authenticated transport for secure Mac pairing. No software can guarantee absolute security. Model output can be inaccurate; verify important details against source material.

Contact and changes

We may update this policy when app data flows or services change. The effective date will be updated when the policy changes.