Privacy Policy
Nodex is a personal AI assistant that lets you control your own computer(s) and connected devices by voice or text, from your phone. It is designed to be local-first: your data, accounts and most processing stay on your own devices. This policy explains what Nodex accesses, where anything goes when it leaves your device, and who we are.
1. Who we are
Nodex is developed and operated by Smartvibes, based in New South Wales, Australia. For any privacy question or request, contact [email protected].
2. What Nodex accesses, and where it goes
| Data | Where it is handled |
|---|---|
| Voice (when you speak a command) | Transcribed to text on your PC. Raw audio is never uploaded to us or to any third party. |
| Your request text & any screenshots you ask Nodex to view | Sent to your AI provider (e.g. Anthropic) to generate a response, under that provider’s privacy policy. You supply the provider key, or use a hosted proxy you have configured. |
| Screen contents (screenshots) | Captured on your PC only when you ask (e.g. “screenshot”, “what’s on screen”). Shown to you and/or sent to the AI for vision. Not retained by us. |
| Network details (adapters, IP addresses, gateway, DNS, VPN connection names, Wi-Fi) | Read locally on your PC when you ask (e.g. “network configuration”). Stays on your PC unless you ask the AI about it or share it yourself. |
| Memory, notes, documents, saved network profiles, preferences, voiceprints | Stored on your devices (your phone and your own PC) and synced between your own devices. Not stored by us. |
| Device features you grant: microphone, camera, contacts, calendar, location, Bluetooth, notifications | Accessed on your device under the OS permissions you grant, for the features you use (e.g. call a contact, add a reminder, proximity sensing). Used locally; not collected by us. |
| Push notification token | A device push token (via Apple/Google push services) is used to deliver notifications to your phone. |
| Subscription status (if you buy a premium plan) | Purchases are handled by the app stores and by RevenueCat, which tells the app whether your subscription is active. We do not receive your payment card details. |
3. How your phone connects to your PC
The Nodex app communicates only with your own PC (the “brain”) and the PCs you connect to it (“Sentries”). Every connection is encrypted with TLS (HTTPS). There are two paths, chosen automatically:
- LAN‑direct — straight over your local network when your phone and PC are on the same Wi‑Fi/LAN. This link is validated by a private certificate that Nodex builds into the app, issued by a small certificate authority that runs on your own PC — its private key never leaves your PC, so no third party can issue certificates for your devices. Your PC’s local‑network listener accepts connections only on your LAN and is gated by your access token; it is never exposed to the Internet.
- Relay fallback — when you are away from home, Nodex falls back to the Nodex relay (
relay.smartvibes.com.au), an optional service that only forwards the encrypted connection between your phone and your PC. It stores none of your content.
Your access token and pairing QR are your credentials. Keep them private.
4. What we collect
Nothing on our servers. We operate no service that stores your requests, content, files, or usage. We collect no analytics or telemetry. Nodex keeps an on‑device diagnostics log to help you troubleshoot; it stays on your phone unless you choose to Share it.
5. Third‑party services
Depending on how you use Nodex, your data may be processed by services you connect, each under its own privacy policy:
- Anthropic (or another AI provider you configure) — processes your request text and any images you ask Nodex to view.
- Apple / Google — push notification delivery, and sign‑in if you use it.
- RevenueCat and the Apple App Store / Google Play — subscription purchases and status.
- Anything you connect — e.g. Microsoft services, Home Assistant, or other tools — operates under its own terms and policies.
6. Data retention & your control
Because your data lives on your own devices, you control it directly: clear the chat, clear this phone’s memory, or delete the app to remove local data from your phone; manage data on your PC through the desktop app and your operating system. Requests already sent to your AI provider are governed by that provider’s retention policy.
7. Security
All phone‑to‑PC traffic is encrypted with TLS and authenticated by your access token. The local‑network path uses a private certificate baked into the app so it cannot be intercepted on your LAN. Nodex works within your operating system’s normal permission model — it does not disable, bypass, or weaken your devices’ built‑in security.
8. Children
Nodex is intended for capable adult operators of their own systems and is not directed to children.
9. Australian privacy rights
Where the Australian Privacy Act 1988 and the Australian Privacy Principles apply, you have rights to access and correct personal information we hold about you. As described above we hold essentially no personal information on our own systems; contact us and we will help where we can.
10. Changes
We may update this policy as Nodex evolves. Material changes will be reflected here with a new “Last updated” date.
11. Contact
Smartvibes — [email protected] · www.smartvibes.com.au