Privacy Policy.

1.Introduction

AVEGANDO AI Labs LLC (“we”, “us”, “our”) makes Novi: Novi for Mac, Novi for iPhone and Novi for Android. This Privacy Policy explains which information Novi handles, where it goes and how long it stays. It applies to Novi for Mac 1.5.5, Novi for iPhone 1.5.5 and Novi for Android 1.5.3 and later versions until we update it.

Novi has no account, no analytics, no ads and no tracking. We do not run a server that receives what you do in Novi, and we do not sell or share your data.

Novi does move your information, but only to places you choose: between your own devices, into your own private iCloud, to servers you connect yourself, and to the AI providers and online services you connect with your own keys and logins. This policy describes each of these routes. When information reaches an AI provider or another service, that company’s privacy policy applies to it.

Novi is an independent app by AVEGANDO AI Labs LLC. It is not affiliated with, endorsed or sponsored by Anthropic or OpenAI.

Novi for Mac links to this policy and to support ([email protected]) and shows the open-source licenses in Settings > General > About. Novi for iPhone links to it in Settings. Novi for Android links to it in Settings > About and on its first screen, before you pair it.

2.What Novi Does

Novi for Mac shows the coding agents running on your Mac or on your own servers (for example Claude Code or the Grok CLI) and lets you approve or deny their requests, answer their questions and pass messages between them. It can also, if you switch them on, chat with an AI model, listen for your voice and show status from online services you connect.

Novi for iPhone and Novi for Android are companions to Novi on your Mac. They show what your agents are doing and let you decide on requests. Novi for iPhone can also send a message, photo or file to an agent.

Most features are off until you switch them on in Novi’s settings on your Mac. On from the start: the weekly recap, the safety net for your agents (section 7), the check for NovaOS on your own Mac, and the Google Drive, Google Calendar, Gmail and Shopify cards (added at first launch when there is room on the island), which read nothing until you grant access or enter a token, except Google Drive’s folder on your Mac (section 9).

3.Information We Collect

• Through the apps: nothing you do in Novi. The apps contain no analytics, crash-reporting, advertising or tracking code and no third-party SDKs that send data. The iPhone and Android apps send nothing to us.
• Update check (Novi for Mac only): once a day Novi for Mac asks https://novaos.cloud/novi/appcast.xml whether a new version exists, and downloads an update from novaos.cloud; downloading Novi for Mac from this website works the same way. Like any web request, each of these shows our server and Cloudflare, which protects it, your IP address, the app’s version and the time. Our server keeps this in an access log for 14 days, only to deliver updates and keep the server safe; Cloudflare handles it under its own policy. Nothing else goes with it: no account, no device ID, no data from your agents.
• When you email us: we receive your email address and your message and use them only to answer you. We keep the conversation as long as needed for your request and as required by law.
• App stores: Apple and Google handle downloads and may show us aggregated statistics and, only if you agreed to it in your device settings, crash reports. Their privacy policies apply.
• Our website: visiting novaos.cloud or downloading Novi for Mac from it is covered by the NovaOS Privacy Policy.

4.Data Between Your Own Devices

Novi for iPhone, through your private iCloud

• Off by default. When you turn on iPhone sync on your Mac, Novi for Mac writes your agents’ status to your own private iCloud database (Apple CloudKit), and Novi for iPhone reads it from there. Only devices signed in to your Apple Account can reach it. We have no access to your iCloud.
• Encrypted on your device: the content is stored in encrypted fields, encrypted with keys from your iCloud account before it is uploaded. This covers agent and project names, steps, commands, questions and your answers, the summary of an agent’s last turn (your prompt, its actions, file changes and its answer), service summaries, messages and files you send, and the names of your Mac and iPhone. We cannot read any of it.
• Not encrypted: to deliver notifications and keep the devices in sync, some technical details stay readable for Apple: the type and name of each record (which include the agent’s identifier, such as “claude”, and a random identifier of your iPhone that iOS creates for Novi), an agent’s colour and state (for example working or waiting), step counters, whether a request is waiting, a one-way fingerprint of each request and of each question (for a short, common text it could be guessed), whether you allowed or denied it, and timestamps. Also readable: which services you connected and whether each is fine or needs attention, when each last changed (for example the time of your last payment, deployment or Notion edit), the kind of service action you start on the iPhone (for example “merge”), whether an agent takes messages from the iPhone, whether a message was delivered or refused, the push environment of your iPhone and the size of encrypted files.
• Notifications: Apple’s push service wakes Novi for iPhone when something changes. The push itself carries only a fixed text and identifiers: “An agent is waiting for your OK”, or the agent’s name with what happened, for example “Claude Code is done”, “Codex has a question” or “An agent ran into a problem”. iCloud sends these when your Mac updates a session, so Apple can tell which kind of event happened for which kind of agent, never its content. When iOS lets Novi for iPhone run, it replaces that text with a notification created on the phone, with the start of the command (up to 140 characters), the start of an answer (up to 220 characters) or a question’s options. Whether these show on your lock screen follows your iOS notification preview setting.
• Face ID: allowing a request, sending a message or file and starting a service action always ask for Face ID, Touch ID or your passcode, also from notifications, the Lock Screen and Siri. Denying a request and answering an agent’s question need only an unlocked iPhone.
• Live Activities: remote Live Activity updates are not in use. There is no Novi relay server. iOS gives Novi push tokens for Live Activities, and Novi for iPhone keeps them in your private iCloud (encrypted), but nothing uses them in this version. While iPhone sync is on and Live Activities are off, your Mac deletes them once a day.
• Stored on the iPhone: the last four turns of each agent, your last 50 decisions (with the command shortened to 200 characters), quick replies and the data the widgets show (project, current step, state). All of it stays in Novi’s private storage on the phone, protected by iOS data protection.
• On your iPhone: so that Novi shows your agents at once when it opens, it keeps a copy of what it last received from your private iCloud (sessions, last turns, service cards) in its own app folder on the iPhone. The file is protected by iOS until you first unlock the iPhone, is not included in backups, and is deleted when you sign out of iCloud or delete Novi’s iCloud data in Settings.
• Spotlight: on by default. Novi adds finished turns to your iPhone’s on-device search index (project, agent, the first line of your prompt up to 200 characters, the first 300 characters of the answer and file names). Entries expire after 30 days. Turning Spotlight off in Novi’s settings removes all of them.
• Photos: Novi uses the system photo picker, so it only sees photos you pick. It asks to add to your library only when you choose Save Image.
• Demo mode: shows made-up agents. Nothing leaves the iPhone.

Novi for Android, over your local network

• Off by default. When you turn on the Android link on your Mac and pair your phone by QR code, the phone connects directly to Novi on your Mac over your local network. The connection is encrypted (TLS) and pinned to your Mac’s certificate, and your Mac accepts only local network addresses. Your Mac announces itself on your local network under its computer name so the phone can find it.
• Always sent while the link is on: your Mac’s name, your agents’ names (a Claude Code session is named after its project folder) and states, their latest step when it is something the agent does (up to 200 characters, which can contain a file name or part of a command), and approval requests with the command or, for a message between agents, its text (up to 500 characters). A step that holds your prompt, an agent’s answer or question, or a message between agents is sent only with session details on.
• Only if you switch them on, one by one: session details, answering agents’ questions, file changes (file names and up to 200 lines), plan usage, chat, and service cards: Stripe (balance and the amount and status of the last three payments, no customer details), GitHub (stars, number of repositories), Vercel (project names, deployment state), Resend (number of emails, delivery state, no addresses), Notion (page titles), Cal.com (times and titles of upcoming bookings; titles often contain the attendee’s name) and n8n (workflow names, success state).
• Stored on the phone: the pairing details, encrypted with a key in the Android Keystore; your last 50 Allow and Deny decisions (agent, a short label and at most the program’s name, never the full command); and your chat history (up to the last 200 messages) in Novi’s private app storage, protected by Android’s device encryption, until you clear them, disconnect the computer or uninstall the app. Sessions, file changes and service cards are kept only in memory. Novi’s data is excluded from cloud backups and device transfers.
• Screen lock: allowing a request and sending an answer ask for your fingerprint, face or screen lock. Denying does not. The chat, pairing, approval and question screens are blocked from screenshots and screen recording.
• Notifications: created on the phone, not sent through a push service. On the lock screen they show either only “Approval needed – Unlock to see the request” and a short status word or, if your lock screen shows all notification content (Android’s default), also the agent’s name and a short label such as “Running a command · npm”. The full command is never in a notification. A new request lights up a sleeping screen for a few seconds; the phone stays locked.
• Camera: used only on the pairing screen to read the QR code. No image is saved or sent.
• Display over other apps: used only for the optional floating Novi pill, which is off by default.
• Unpairing: “Disconnect this computer” on your Android phone deletes the pairing, your chat history and your decision history from the phone and asks your Mac to forget the phone’s chat. “Pair again” on your Mac makes the old pairing invalid immediately. You can also clear the chat (Chat > Clear) and the decision history (Settings > Clear history) at any time.
• Demo mode: shows made-up agents without connecting anywhere. Decisions you make in it are added to the phone’s own history.

5.Messages, Photos and Files From Your iPhone

Optional and off by default. If you turn on instructions from the iPhone on your Mac, you can send a message to one of your agents, with one photo or file, from Novi for iPhone.

• Sending: Novi asks for Face ID (or your passcode) first. A message can be up to 8,000 characters, a photo or file up to 20 MB. Photos are converted to a new JPEG of at most 2048 pixels, which leaves out embedded details such as location. Files you pick from the Files app are sent as they are, including any details stored inside them.
• Encryption: the message text goes into an encrypted iCloud field. Each photo or file is encrypted on the iPhone with its own new 256-bit key (AES-256-GCM). The key and the file name are stored in encrypted fields, the encrypted file in your private iCloud, so only devices signed in to your Apple Account can open it. Novi for Mac decrypts it.
• On your Mac: Novi for Mac fetches the message and deletes it, with its file, from your iCloud before anything runs. It ignores messages older than 10 minutes. If your Mac never picks a message up (for example because it is off or the feature was switched off), the message and its encrypted file stay in your iCloud until your Mac’s daily clean-up deletes them after 24 hours (while iPhone sync is on) or you delete Novi’s iCloud data (see section 14).
• Agent on your Mac: the decrypted file is saved in ~/Library/Application Support/Novi/Inbox, readable only by your user account and marked like a download. For Claude Code on your Mac, Novi continues that conversation in the background in the session’s folder (it does not appear in the open terminal or editor window); the agent’s hooks keep working, so its requests still need your OK. Novi keeps none of that run’s output: its log notes only whether the run ended normally, how long it took and a short error type, and if the run fails, your iPhone shows why. While Grok is working, it gets the message at the end of its current step through its hook, which saves a file sent with it in ~/.novi/inbox, readable only by your user account. When Grok is idle, Novi types the message into Grok’s own window in Terminal or iTerm2, as if you had typed it, or opens Grok in a new Terminal window with it. Novi never runs Grok hidden in the background.
• Agent on your own server: the message travels from your Mac through your own SSH tunnel to the agent session on your server. The file is saved in ~/.novi/inbox on that server, readable only by your user account there. Until the server picks it up, it is held only in Novi’s memory on your Mac.
• Automatic deletion: files in both inboxes are deleted after 7 days. The clean-up runs when Novi for Mac receives a file (and when it starts, if instructions from the iPhone are on), when you drop a file on Novi, when an agent session starts on your Mac, and on a server when a file arrives or a new agent session starts, so a file can stay longer if none of this happens. You can delete the files yourself at any time.
• Processing: the agent reads your message and file like anything else you give it. Claude Code sends them to Anthropic under your own Anthropic account, and Anthropic’s terms and privacy policy apply. We do not receive them.

6.Messages Between Your Agents

An agent can ask Novi to pass a message to another of your agents, for example from Claude Code on your server to the Grok CLI on your Mac, and get its reply back.

• Every message needs your Allow. Novi shows the sender, the target and the whole text, on your Mac and on your phones. There is no “always allow”. One Allow delivers exactly that one message and approves nothing it asks for. The receiving agent’s reply goes back to the sender without a second Allow. Novi for Android shows at most 500 characters of a message; a longer one can be allowed only on your Mac or iPhone.
• Delivery: messages travel only on your Mac or through your own SSH tunnel to your own server, never through us. They are held in Novi’s memory and expire after 30 minutes; Novi forgets their text at the latest about two hours after it was written. With iPhone sync on, a delivered message also becomes part of the receiving agent’s turn summary in your iCloud (encrypted, see section 11). Files sent along (up to 20 MB) are saved in the receiving inbox and deleted after 7 days, as described above.
• Processing: the receiving agent works with the message like any other input and sends it to its own AI provider (for example xAI for the Grok CLI or Anthropic for Claude Code) under your account there.

7.Novi on Your Mac

• What your agents tell Novi: when you connect an agent (for example Claude Code, the Grok CLI, Gemini CLI, Codex or GitHub Copilot CLI), Novi adds a small hook to that tool’s own settings file (for example ~/.claude/settings.json). The agent then sends Novi its events: your prompts, the commands and file changes it wants to make, tool output, its questions and its final answers. Novi uses them to show status, requests and file changes, and passes them to your phones only if you switch that on. They are never sent to us.
• Safety net: once an agent is connected, the hook checks each command on your Mac or server before it runs, also when Novi is not open, and reports what it stopped only to Novi on your Mac. It stops commands that delete files or throw away work (for example rm, git clean, git reset --hard, a force push or dropping a database table), except for rebuildable folders such as node_modules, and tells the agent to move the files into Novi’s archive in ~/.novi/archive instead. The archive is never emptied automatically and can hold copies of your files, including secrets, so delete what you no longer need. It also asks you before an agent controls a browser, an app or the screen. Rollback (beta), off by default, keeps copies of files an agent changes in ~/Library/Application Support/Novi/checkpoints (the newest 20 per agent and project, plus everything from the last 7 days).
• “Always” on your Mac: for some agents (for example Claude Code), an approval on your Mac for a session running on that Mac also offers “Always”. It makes the agent save a permanent permission rule in its own settings, so it no longer asks for that kind of request. You can remove the rule in the agent’s settings. Your phones, sessions on a server you connected, away mode and messages between agents offer only Allow and Deny.
• Keys and tokens: API keys and service tokens you enter are stored in the macOS Keychain, only on that Mac and never synced to iCloud. They are sent only to the provider or service they belong to.
• Stored on your Mac: the weekly recap (on by default: project names, the number of commands run, file and line counts, questions and your decisions), kept for 12 weeks and removable with Clear history in Novi’s settings; technical logs in ~/Library/Logs/Novi (event and tool names, project and workflow names, where you decided a request, errors; no prompts, answers, command text or message text), each emptied when it reaches 1 MB; files you drop on Novi, copied to ~/Library/Application Support/Novi/inbox, readable only by your user account and deleted 7 days after you drop them; a token file that lets your agents’ hooks reach Novi; and the inbox for iPhone files described in section 5. Chat conversations are kept only in memory and end when Novi quits.
• Terminal commands (Mac): if you turn on Settings > General > Terminal, Novi adds one marked block to your ~/.zshrc (a copy of the file is kept once as ~/.zshrc.novi-terminal-backup; turning the option off removes only that block). When a command you typed in zsh runs longer than the time you set (60 seconds by default), the shell sends Novi on the same Mac the command line, how long it ran, its exit code, the folder and the terminal app. Novi shows it on the island and can say the program’s name aloud with your Mac’s built-in voice. Its log keeps only the program’s name, the duration and whether it succeeded, never the arguments. Nothing of this leaves your Mac.

Permissions Novi asks for on the Mac

• Accessibility: to read the active window’s title and, when you drag Novi onto a window, its selected text, document and visible chat messages.
• Automation: to jump to your terminal, to type a message you sent from your iPhone into Grok’s terminal window, read the open browser tab’s title and address, read the Finder selection, prepare emails and read Gmail unread counts in Mail, and control Music and Spotify.
• Microphone and Speech Recognition: voice and dictation (section 8).
• Calendars: upcoming events from your Google calendars (section 9).
• Contacts: to look up an email address when you ask Novi by voice to prepare an email.
• Local Network: the Android link.
• Novi does not ask for Screen Recording and takes no screenshots.

8.Chat, Voice and AI Providers

Your own AI provider

Chat and the voice assistant are optional. They use the AI provider you choose, with your own API key: Anthropic (Claude), Google (Gemini), OpenAI, xAI (Grok), or a model server you run yourself, such as Ollama or LM Studio, in which case nothing leaves the machine you point Novi at. Each provider processes your requests under its own terms and privacy policy, and some process data in the United States. We do not receive them.

What a chat message sends

• Your message and the conversation so far, with instructions for the model that include your first name from your macOS account. If you switch the provider during a conversation, the new provider receives the conversation so far, including earlier answers, which may quote a file you dropped; the file itself and its text only ever go to Anthropic or your local model.
• With the first message of a conversation: the name of the app, the window title and the web address of the window you were using when you opened the chat, unless you remove it with the × on the window chip.
• Files you drop on Novi: Anthropic receives the file itself (PDFs, images, text up to 200 KB); Google, OpenAI and xAI receive only the file name; a local model receives text files up to 24,000 characters. A file is sent with the first message of a conversation; for a file dropped later, start a new conversation.
• If the model searches the web (Anthropic only), Anthropic runs the search.
• Chat from your Android phone goes to your Mac, and your Mac sends it to the provider you picked. Your key never reaches the phone.

Dragging Novi onto a window

When you drag Novi onto a window, Novi reads that window and first asks in the chat whether to send its content to your chat provider, naming the provider and what would be sent. Only after you choose Send does it go to that provider. Cancel sends nothing. The same question comes before Novi drafts a WhatsApp reply or translates a message. You can choose “Don’t ask again” and turn the question back on in Settings > Chat. If you type your own message while the question is shown, the window’s title and address, or the file, shown on the chip go with it, like any chat message. The keyboard shortcut reads no content: it puts the front window’s app, title and address on the chip, which goes with your next message unless you remove it with the × (for WhatsApp it asks first, as above).

What can be sent: the window and tab title, web address and document name, selected text, an excerpt of the document’s text (for example the first pages of a PDF, up to 12,000 characters) and, for Anthropic, the file itself (PDFs and images up to 1.5 MB, text up to 200 KB). In a chat app such as WhatsApp: the contact’s name and the last 12 visible messages; Novi writes the suggested reply into the text field and never sends it. Files that look like keys are skipped (for example .env, id_rsa, .pem, .key or names containing “secret” or “credential”); other files are not checked, so do not drop files with passwords on Novi.

Voice on the Mac

• Off by default. When you turn voice on, the microphone listens for “OK Novi” (and similar phrases such as “Hey Novi”) until you turn it off. It pauses while your Mac is locked, asleep or in Low Power Mode.
• Speech recognition: with “Only on-device speech recognition” on (the default on Macs with Apple silicon), Novi recognizes speech on your Mac and the audio does not leave it; if your Mac or your language cannot do that, the wake word stays off and dictation gives no text. With it off (the default on Intel Macs, which cannot recognize speech on the device), a detector on your Mac passes stretches of speech to Apple’s speech recognition: on Intel Macs, and on Apple silicon until on-device recognition is confirmed, that audio goes to Apple’s speech recognition servers, including speech not meant for Novi, because Novi has to listen to hear its name. Dictating a chat message then lets macOS decide whether it runs on the device. Apple’s privacy policy applies.
• Your request: only if you turn on “Use Claude for voice requests” in Settings > Voice (off by default) and have saved an Anthropic key does the text of what you say after “OK Novi” go to Anthropic, never the audio. Each request includes the date and time and your agents’ names; when Claude asks for them, Novi adds their pending requests and current step (or the start of their last answer), your plan usage, what is playing, and figures from your connected services (for example today’s Stripe total, GitHub counts, the next Cal.com booking with the attendee’s name, the last Resend subject with the start of the recipient’s address, a Notion page title). When you ask Novi to prepare an email, the contact’s email address goes too. The voice conversation so far goes with each request until 90 seconds after the last one. Because Claude may search the web, every request includes your time zone and country. With the switch off, nothing you say goes to Anthropic: Novi handles voice commands on your Mac with its built-in commands and, on macOS 26 with Apple Intelligence, Apple’s on-device model.
• Spoken answers: your Mac’s built-in voice by default. If you choose ElevenLabs or OpenAI as the voice and enter your key, the text of each spoken sentence is sent to that provider; a chat answer you have read aloud is sent to it as a whole.
• Weather: when you ask Novi for the weather, the place you name goes to Open-Meteo (geocoding-api.open-meteo.com) to find its coordinates, and those coordinates go to Open-Meteo’s forecast service (api.open-meteo.com). No key, account or other data is sent. Open-Meteo’s terms apply.

Voice on the iPhone

When you dictate a message, Novi for iPhone uses Apple’s speech recognition on the device when the iPhone supports it, otherwise Apple’s servers.

Your coding agents

Claude Code, the Grok CLI and other agents are separate products with their own accounts and terms. Novi does not change what they send to their providers.

9.Connected Services

Optional. A service is connected only when you enter your own token or grant a macOS permission, with two exceptions that stay on your Mac: the NovaOS check and the Google Drive card, which reads the names and dates of files in the Google Drive folder on your Mac if there is one. Novi for Mac then reads it directly from your Mac, regularly (every 15 seconds to 30 minutes, depending on the service) while the token is saved. Nothing goes through us.

• Stripe: balance and recent payments (amount, status, description or billing name); on request from the iPhone also payouts, subscriptions and receipt email addresses.
• GitHub: your repositories and stars, your open pull requests with titles and check results, review requests and your contribution calendar.
• Vercel: recent deployments and project names.
• Resend: recent emails with recipients, subject and delivery state. Novi sends an email only when you press Send on a mail card.
• Cal.com: upcoming bookings with title, time, notes and the first attendee’s name and email address.
• n8n: recent workflow runs on the n8n address you enter, with the error message or a short preview of the last step’s output.
• Notion: titles and dates of recently edited pages.
• Shopify: with an Admin API token you create, only your own store address ending in .myshopify.com: the store name, the number of open orders and the order number and total of the last five open orders. No customer names or addresses.
• Google Calendar: through the Calendar app on your Mac, only calendars from Google accounts you added to macOS: the next 14 days, up to 8 events (title, start, calendar name). Novi never signs in to Google.
• Gmail: through the Mail app, only while Mail is already open: account names and unread counts, never a message.
• Google Drive: the Google Drive folder on your Mac (Drive for desktop): names and dates of the six newest files.
• Music and Spotify: playback control on your Mac. To show cover art, Novi asks Spotify’s public web service with the track’s link.
• NovaOS: every 20 seconds Novi checks for a NovaOS server on your own Mac (it sends Novi’s name and version to a local address). This check is always on and stays on your Mac.

Mail

Mail: on the Mac, Novi reads the unread count of every account in Apple Mail (Automation permission). On every device you can also add a mailbox with an app password from your mail provider. Novi then connects from that device directly to your provider’s IMAP server (TLS, port 993) and reads only the number of unread messages and the sender, subject and date of the newest unread ones. It never marks a message as read and never moves, deletes or sends mail. The app password is stored only on that device (macOS/iOS Keychain, not synced to iCloud Keychain; Android Keystore-encrypted) and is sent only to that server. Senders and subjects are shown on the device and are not sent to us or anywhere else; on the Mac, the unread count can go to your iPhone through your private iCloud like the other service cards. Removing the mailbox in Novi deletes the password.

Some of these services hold other people’s data, for example your customers’ names, booking attendees or email recipients. Novi shows it on your devices and uses it only as described in this policy.

• On your iPhone: if iPhone sync is on, summaries of GitHub, Stripe, Vercel, Resend, Cal.com, n8n and Notion, including the details above, are stored encrypted in your private iCloud. While their card is on, short summaries of Shopify (your store address and the number of open orders), Google Calendar (titles and times of the next five events, only with calendar access), Gmail (the total unread count) and Google Drive (whether it is connected and how many files changed this week) are stored there too, also encrypted. Shopify and Google cannot be controlled from the iPhone. From the iPhone you can, after Face ID, redeploy, promote or cancel a Vercel deployment, re-run, approve or merge on GitHub, and activate, deactivate or retry an n8n workflow. Nothing that moves money or sends an email can be started from the iPhone.
• On your Android phone: only the reduced cards listed in section 4, each switched on separately.
• Music data, and Shopify and Google details beyond the summaries above, stay on your Mac.

10.Away From Home and Your Servers

• iPhone: works from anywhere through your private iCloud, as described above.
• Agents on your own servers: if you connect a server with Novi’s setup script, it installs a small hook, a message tool and a private access token in ~/.novi on that server and connects it to Novi on your Mac through your own SSH tunnel. Novi then receives that server’s agent events (for example requests, steps and answers) like a local agent’s. Anyone with administrator (root) access to that server can read the token and the traffic, so use Novi only with servers you control.
• Android: works only on your local network. Novi for Android contains a client for an end-to-end encrypted relay that you would operate yourself, but Novi for Mac does not offer a relay, so it is not used with a Mac.
• No Novi server: we do not operate a relay, push or sync server for Novi.

11.How Long Data Is Kept

• Inboxes on your Mac and servers: photos and files from the iPhone and files sent between agents are deleted after 7 days (see section 5).
• Agent-to-agent messages: held in memory, expire after 30 minutes.
• Your private iCloud: Novi removes most records once they are used: a message or service action when your Mac reads it, a request when it is decided. While iPhone sync is on, your Mac also deletes leftovers from your private iCloud once a day: decisions, answers, service requests and instructions from the iPhone and their results after 24 hours, summaries of agents’ last turns after 30 days, and the iPhone’s Live Activity tokens while Live Activities are off. Session and service records stay while they are in use and are removed when a session ends or you turn iPhone sync off. Summaries of agents’ last turns from earlier days stay after you turn iPhone sync off, until the daily clean-up once sync is on again or until you delete Novi’s iCloud data. A few other records that were never picked up (for example a request your Mac could not remove because it was closed) stay until you delete Novi’s iCloud data.
• On the iPhone: the last four turns per agent and the last 50 decisions, replaced by newer ones; Spotlight entries for 30 days.
• On the Android phone: the last 50 decisions and up to 200 chat messages, until you clear them, disconnect the computer or uninstall the app.
• On your Mac: the weekly recap for 12 weeks; logs until they reach 1 MB; chat only while Novi runs; keys and tokens until you remove them; dropped files for 7 days; Novi’s archive (~/.novi/archive) until you empty it.
• With AI providers and services: as set by each provider’s own terms and your settings there.
• With us: emails you send us, and the access log of the Mac’s update check and of downloads for 14 days (see section 3).

12.Security

Keys and tokens you enter are stored in the macOS Keychain, only on that Mac. Content in iCloud is stored in encrypted fields, files from the iPhone are encrypted end to end, the Android link is pinned TLS on your local network, and approvals on the phones ask for Face ID or your screen lock. No system is perfectly secure: anyone who can unlock your Mac or your phone, or who has administrator access to a server you connect, can see what Novi shows there.

13.Children

Novi is a tool for software developers and is not directed at children under 13. We do not knowingly receive information from children. If you believe a child has sent us information, contact us and we will delete it.

14.Your Choices and Rights

Your choices

• Turn any optional feature off in Novi’s settings on your Mac. Turning iPhone sync off removes the current status records from your iCloud.
• Remove a connected service or AI provider key in Novi’s settings on your Mac, and revoke the token at the service itself.
• Unpair your Android phone with “Disconnect this computer” on the phone (this also deletes its chat and decision history) or “Pair again” on your Mac.
• Turn Spotlight off in Novi for iPhone’s settings to remove its search entries.
• Delete Novi’s iCloud data: in Novi for Mac, Settings > General > iPhone > Delete my iCloud data (this also turns iPhone sync off), or in Novi for iPhone, Settings > Delete my iCloud data. After you confirm, everything Novi stored in your private iCloud is deleted. If iPhone sync is still on on your Mac when you delete from the iPhone, your Mac starts again with your current sessions. Data stored inside the apps on your devices stays until you uninstall them.
• Delete the inbox folders named in section 5 at any time, and uninstall the apps. Uninstalling removes the data stored inside each app, but not Novi’s data in your iCloud, the inbox folders or the files Novi set up on your servers (~/.novi and Novi’s entries in your agents’ settings files), which you can delete yourself.

Your rights

Depending on where you live, including in the European Union, the United Kingdom and some US states, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability and to withdraw consent. Because Novi keeps your data on your own devices, in your own iCloud and with the providers you choose, you can exercise most of these rights directly there. For the little we hold (emails you send us), contact us below. We answer within one month. We process those emails to answer your request (Art. 6(1)(b) GDPR) and in our legitimate interest in running our support (Art. 6(1)(f) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

AI providers and services you connect may process data outside your country, including in the United States. Their terms and privacy policies explain how they protect it.

15.Contact

For privacy-related inquiries, contact us at: [email protected]

16.Changes

If this Privacy Policy changes, we update this page and the revision date above. When a change matters for how your data is handled, we also say so in the app’s release notes.

November 5, 2026: the update check of Novi for Mac (Sparkle) and the access logs it leaves on our server described (sections 3 and 11).

November 4, 2026: terminal commands that run long (Mac, optional), the weather source (Open-Meteo) and the copy of the last state kept on the iPhone and reading mail with an app password described.

October 16, 2026: Novi keeps no output of the Claude Code runs started from your iPhone, and a failed run is shown on the iPhone. A file’s contents never reach Google, OpenAI or xAI, also after switching provider during a conversation (earlier answers do go along). Without session details, the Android phone no longer receives steps that hold your prompts, answers, questions or messages between agents. Dropped files are readable only by your user account and deleted 7 days after the drop. Spotlight keeps only the first line of a prompt. Added the safety net, what is on from the start, more details that iCloud stores in clear, Android lock-screen notifications, chat after switching provider, the keyboard shortcut, voice requests, crew replies and retention of turn summaries. Corrected file size limits and the NovaOS check.

October 15, 2026: Grok on your Mac gets messages from the iPhone typed into its own Terminal or iTerm2 window (Automation permission), never in the background.

October 14, 2026: added messages, photos and files from the iPhone, messages between agents, chat and voice (including the new on-device and Claude switches), the question before a window’s content is sent, connected services, permissions, the details of what iCloud stores in clear, the daily iCloud clean-up and Delete my iCloud data, retention periods and your rights. Corrected the descriptions of notifications, unpairing on Android and the relay. Later the same day: Grok takes messages from the iPhone (typed into its own window when it is idle), Shopify and Google summaries on the iPhone, “Always” only for sessions on your Mac, service requests in the daily clean-up, notifications from iCloud when an agent finishes, fails or asks a question.

Imprint

Information about the provider of Novi.

Company

AVEGANDO AI Labs LLC

Address

30 N Gould St Ste N
Sheridan, WY 82801
USA

Operations

European Union (GDPR)

Phone

+1 (307) 284-4469

Email

[email protected]

Web

avegandoailabs.com