Legal

PXS Desktop — Privacy Policy

Last updated: 7 October 2026

PXS Desktop ("the app") is developed by ByteNine AS ("ByteNine", "we", "us"). This policy explains what data the app handles and how. In short: PXS Desktop does not track you and does not show ads. It uses Firebase (Google) for anonymous usage statistics and crash reports, described below, and nothing else leaves your device unless you choose to send it.

What stays on your device

Your settings — display, dock, launcher, themes, saved web apps, and other preferences are stored locally on your iPhone. They are not sent to us.
Web browsing — PXS Desktop includes a web browser and lets you run websites as apps. Cookies, logins, history, and site data created while browsing are stored on your device by the system web engine (WebKit), the same way Safari stores them. We do not collect, transmit, or have access to your browsing activity, the sites you visit, or the accounts you sign into.
Files, photos, downloads — anything you open, download, or view stays on your device.
Notes, scans, and alarms — notes you write, documents you scan with the Camera app, and alarms you set in the Clock app are stored on your device.
Apple Health — if you connect Apple Health in the Daily Overview app, PXS Desktop reads your sleep and a few measurements (resting heart rate, heart rate variability, respiratory rate, blood oxygen, steps, active energy, and weight) to show last night's sleep and your morning vitals. It only reads; it never writes to Apple Health. Your health data is used on your iPhone to draw that card and nothing else: it is not sent to ByteNine or to anyone else, it is not used for advertising or marketing, and the app does not store it in iCloud.
Premium Voice — the optional on-device neural voice is a one-time model download from our servers. After the download, speech is generated entirely on your device: the text being read and the audio never leave your iPhone, and the download request contains no personal information. The optional welcome greeting spoken when you connect a screen is generated this way — on your device, from your own calendar and reminder counts.
Calendar, reminders, and personal data in Daily Overview — shown and managed on-device.
News headlines — if you enable the news module, your device fetches public RSS feeds directly from the publishers you choose (for example NRK). We do not receive your reading choices, and no news data passes through our servers.
Trial and purchase state — how many days you have used the app is stored in your device's keychain. It is not sent to us.

Device permissions

The app asks for these only when a feature needs them, and the data is used on-device for that feature — it is not collected by us:

Photos — to display your photos on the external screen, and to save the photos you take with the Camera app.
Camera and microphone — for the Camera app (photos and document scans), for video and voice calls inside web apps you choose to use (for example Microsoft Teams or Google Meet), and the microphone for the optional voice launcher.
Speech recognition — to turn your spoken command into a launcher action (voice launcher).
Calendars, reminders and Apple Music — to show upcoming events, tasks and now-playing information in the optional widgets and the Daily Overview panel.
Location (while using the app) — to show local weather. Your approximate coordinates are sent from your device to the weather service (MET.no, the Norwegian Meteorological Institute) to fetch the forecast; MET.no requires no account and receives nothing else about you. Your location is never sent to ByteNine, and we do not store it.
Apple Health (read only) — to show last night's sleep and your morning vitals in Daily Overview, as described above. You can change what the app may read in the Health app at any time.
Alarms — so the alarms you set in the Clock app ring at their time.
Local network — so a browser on the same Wi-Fi can connect to your phone when you use AnyScreen (below).

You can grant or revoke any of these in iOS Settings at any time. Denying a permission only disables the specific feature that needs it.

AI features (optional)

The launcher and terminal accept natural-language commands. When you use one, the text needed to answer — your typed or dictated command — is sent to our server at bytenine.com and passed to an AI provider (such as OpenAI or Anthropic) to generate the response. If you choose an online voice instead of the on-device Premium Voice, the text to be spoken is sent the same way to produce the audio.

This happens only when you actively use an AI feature. No account is required, the requests are not used to build a profile of you, and they are not used to train anyone's models. Each request carries your app's install identifier (below) so we can enforce fair-use limits and stop abuse of the service; we keep those request counts, not a history of what you asked.

AnyScreen

AnyScreen shows your desktop in a web browser. Pairing uses a short one-time code exchanged through bytenine.com; the video connection itself is established directly between your phone and the browser (WebRTC) — we cannot see your screen. In the compatibility fallback mode, encoded picture frames pass through our server to reach the browser; they are relayed, not stored. Text you paste and files you drop in that browser (AnyScreen Drop) travel to your phone over the same direct connection; they do not pass through our servers.

The install identifier

When PXS Desktop first runs it generates a random identifier for that installation and stores it on your device. It is not your Apple ID, your phone number, your device's serial number, or any advertising identifier, and it is never shared with advertisers, data brokers, or other apps.

We receive it in three places: with AI requests (for the fair-use limits described above), attached to feedback you send, and once in the free-launch registration below. Because a feedback report can contain both this identifier and an email address you chose to give us, we do not claim it is anonymous in our App Store privacy label — it is declared there as data linked to you, used only to make the app work.

What we receive — only if you choose to send it

In-app feedback and bug reports. If you use the "Send Feedback" screen, the report you write is sent to our servers at bytenine.com so we can read and act on it. If you add your email address (optional), we store it only to reply to you. Attached automatically to help us reproduce issues: the app version, your iOS version, your device model (e.g. "iPhone 15 Pro"), and the install identifier so we can group reports from the same install.
Free-launch registration ("founders pass"). Installations made during PXS Desktop's free launch period keep their features free after paid upgrades are introduced. To make that possible, the app registers the install identifier with bytenine.com once, so the install date is recorded on our server rather than self-reported by the device. The registration contains the identifier and nothing else.
Remote configuration. The app periodically requests a small configuration file from bytenine.com (feature flags and occasional announcements). This request contains no personal information about you.

Feedback content may be shown publicly on the app's page at bytenine.com so others can vote on feature requests. Your email address is never shown publicly. You can choose "Developers only" when submitting to keep a report private.

Usage statistics and crash reports (Firebase)

The app includes Firebase Analytics and Firebase Crashlytics from Google. They help us see which features are used, whether the app crashes, and whether purchases go through, so we can fix problems and improve the app.

What is collected: which screens and features are used (for example that a desktop was started, or that the purchase screen was shown), app version, device model, iOS version, an approximate location derived from your IP address at the country/region level, purchase events with the amount and currency, and — if the app crashes — a crash report with technical details of the app's state.
Identifier: Firebase creates a random identifier for your installation of the app. It is not the advertising identifier (IDFA): the app uses the Firebase build without advertising support, never asks for tracking permission, and never sets a user id. The statistics are not linked to your name, email, Apple ID, or the install identifier described above.
Not collected: what you browse, the sites you visit, your files, your text, your calendar or reminders, and your precise location.
Where it goes: to Google's Firebase servers on our behalf. Google's own terms and privacy notice apply to the processing: https://firebase.google.com/support/privacy
Retention: event data is kept for 14 months in Firebase; crash reports for 90 days.

Purchases

PXS Desktop is sold through Apple's In-App Purchase system. Your payment details go to Apple, never to us — we never see or store your card, bank, or billing information. We receive from Apple only the confirmation that a purchase or subscription is valid, which the app uses to unlock its features. Subscriptions are managed and cancelled in your Apple account settings, not in the app. Refund requests are handled by Apple.

What we do not do

We do not sell or share your personal information.
We do not show ads and do not use advertising SDKs or the advertising identifier.
We do not build a profile of you or track you across other apps or websites. The Firebase statistics above are anonymous and used only to improve the app.

Children

PXS Desktop is not directed at children under 13 and does not knowingly collect personal information from them.

Data retention and deletion

Feedback you send is kept as long as needed to address it and improve the app. AI fair-use counters are short-lived and expire on their own. The founders-pass registration is kept so your free access can be honored for the lifetime of the app. To have a feedback report, associated email, or your install's registration removed, contact us at the address below. Uninstalling the app removes all locally stored data (settings, browsing data, files, the downloaded voice model) from your device.

Contact

Questions or requests about this policy or your data:

ByteNine AS — support@bytenine.com — https://bytenine.com

Changes

We may update this policy; the "Last updated" date above reflects the latest version.