The Premsys App - Privacy Policy

PREMSYS APP PRIVACY POLICY

Effective date: July 31, 2026

Last updated: July 31, 2026

Publisher: Premsys Inc., a Delaware Corporation ("Premsys", "we", "us")

Application: The Premsys App for iPhone ("app", "the Premsys app", "Premsys", "the app")

Contact: info@premsys.ai

1. THE SHORT VERSION

Premsys is a private AI assistant that runs its language models directly on

your iPhone. We do not operate an account system, we do not have a server that

stores your content, and we cannot read your conversations.

Your chats, attachments, documents, generated files, Health data, calendar

entries, and reminders are processed and stored on your device only. They are

never uploaded to us and never transmitted to any third party by Premsys.

There are exactly four situations in which this app makes a network connection,

and all four are described in plain language in Section 4. The most important

one to understand is web search: if you turn on the Web Search tool, the search

phrase for that request leaves your device and is sent, through our search

relay, to Brave Search. At that point the search phrase is handled under Brave's

privacy policy, not this one.

We collect no analytics. We use no advertising or tracking SDKs. We do not

build user profiles, we do not track you across apps or websites, and we do not

sell or share personal information. Premsys does not use Apple's App Tracking

Transparency framework because it performs no tracking.

2. NO ACCOUNT, NO SERVER-SIDE PROFILE

Premsys has no sign-up, no login, no username, no password, and no user

account. We do not ask for your name, email address, phone number, or date of

birth. We hold no server-side record that corresponds to you or your device.

Because there is no account, there is nothing for us to look up, export, or

delete on your behalf. You are the sole holder of your Premsys data, and it

lives in the app's sandbox on your device.

3. WHAT IS STORED ON YOUR DEVICE

The following are created and kept on your device, inside the app's private

storage area, and are not transmitted to us:

- Conversations, including every message you send and every response the

on-device model generates.

- Photos, video frames, audio files, and documents you attach to a chat, plus

the thumbnails shown in the transcript.

- Text extracted on-device from your attachments, including Vision OCR text

from images and scanned PDFs, and Apple on-device speech transcripts from

audio.

- Documents and folders you add to the local knowledge library (RAG),

including the local search index built from them.

- Files Premsys generates for you (PDF, Excel, Word), saved to Generated

Files.

- Your settings: selected model, enabled AI functions, sampler values, your

custom system prompt, dictation preferences, and the count of free web

searches used in the current calendar month.

- Any AI model you choose to download.

How to delete this data:

- Delete individual chats and library documents inside the app.

- Delete the app from your iPhone to remove all of it at once, including

downloaded models. iOS deletes the entire app container.

Device backups. Premsys does not sync your data to iCloud and contains no

CloudKit or iCloud Drive integration. However, if you back up your iPhone

(iCloud Backup or an encrypted computer backup), the app's stored content is

included in that backup the same way other apps' data is, and that backup is

governed by Apple's terms and privacy policy, not this one. Downloaded model

files are deliberately excluded from backups because of their size.

Files app visibility. Premsys exposes its Documents folder to the iOS Files

app, so files you add and files Premsys generates are visible under "On My

iPhone > Premsys." This is local device access only.

Device security. Your Premsys data is protected by iOS app sandboxing and

device encryption. Anyone with your unlocked iPhone can open the app and read

your chats. Use a passcode, Face ID, or Touch ID.

4. WHEN DATA LEAVES YOUR DEVICE

This is the complete list. There are no other outbound connections in the app.

4.1 WEB SEARCH (off unless you enable it)

If you enable the Web Search tool in AI functions and ask a question that

requires current public information, Premsys sends a short public search phrase

over the network.

- What is sent: only the public search phrase derived by the app from your

visible request, capped at 400 characters, plus a result count and a

safe-search setting. From your iPhone to our relay it travels inside the

request body rather than in a web address, so it does not appear in

ordinary web-server access logs on that hop. Our relay then passes the

phrase to Brave's search API as a standard search request, so Brave

necessarily receives the phrase itself — that is what performing a search

means.

- What is NOT sent: your conversation history, your knowledge-library

documents, your Health data, your calendar or reminders, your files, your

photos, your custom system prompt, or anything the AI model itself proposes

as a query. The app deliberately ignores the model's proposed query text

and sends only the phrase derived from your own visible request. Private or

device-sourced questions do not trigger a search at all.

- Where it goes: the phrase is sent to the Premsys search relay, a small

Cloudflare Worker we operate at premsys-search.premsys.workers.dev. The

relay adds our Brave Search API credential (which is never present in the

app) and forwards the phrase to Brave Search. Brave's results are returned

to your device unchanged.

- What we do with it: nothing. The relay is stateless. It does not log,

store, or retain your search phrases or the results, and it writes no

database record. It applies a rate limit keyed to the connecting IP address

to prevent abuse of our shared Brave credential; that IP address is handled

transiently by Cloudflare's rate-limiting service and is not stored by us or

used to identify you.

- Third parties: Brave Search receives and processes the search phrase under

Brave's own privacy policy (https://brave.com/privacy/). Cloudflare, Inc.

is our infrastructure provider for the relay and processes the connection

(including your IP address) as part of delivering it, under Cloudflare's

privacy policy. Once a search phrase reaches Brave, its handling is

governed by Brave, and we have no control over it.

- Your control: turn Web Search off at any time in AI functions. With it off,

Premsys makes no search requests at all. The search connection uses an

ephemeral session with no cookies and no caching, so search traffic leaves

nothing behind on your device.

- Free and Pro allowance: the count of free searches used this month is kept

on your device, not on a server. We do not maintain a server-side usage

record tied to you.

Practical advice: treat anything you ask with Web Search enabled the way you

would treat typing into any search engine. Do not include information you would

not put into a search box.

4.2 OPTIONAL AI MODEL DOWNLOADS

The Gemma models are not bundled in the app. If you choose to download Gemma 4

E2B (about 2.59 GB) or Gemma 4 E4B (about 3.66 GB), your device downloads the

model file directly from Hugging Face (huggingface.co). This is an ordinary

file download: no content of yours, and no information about you, is sent.

Hugging Face's servers may record the request in their standard hosting logs,

including your IP address, under Hugging Face's privacy policy. Downloads occur

only when you start them.

4.3 WEATHER (only if you connect it)

If you connect Weather on the Today dashboard, Premsys requests your

approximate location from iOS and sends coordinates directly to Apple's Weather

service (WeatherKit) to retrieve current conditions and the forecast.

- Premsys requests reduced-accuracy location and additionally rounds the

coordinate to roughly a two-kilometer grid in code before use, so even if

you have Precise Location enabled system-wide, Weather receives only a

coarse area.

- Premsys does not store your location and does not transmit it anywhere

except to Apple's Weather service for that forecast.

- Weather data is provided by Apple Weather; Apple's privacy policy applies

to that request.

- Disconnect Weather at any time in AI functions, or revoke location access

in iOS Settings > Privacy & Security > Location Services.

4.4 SUBSCRIPTIONS

Premsys Pro is sold through Apple's In-App Purchase system. Apple processes the

transaction. We never see, receive, or handle your payment card, Apple Account

credentials, or billing address. The app verifies your subscription status

using Apple's StoreKit framework on the device itself; that verification does

not contact any Premsys server. Apple provides us only with aggregated,

non-identifying sales and subscription reporting. Apple's privacy policy

governs the purchase.

4.5 SIRI, SHORTCUTS, AND THE ACTION BUTTON

Premsys offers "Ask Premsys" and "Start New Premsys Chat" App Intents. If you

invoke Premsys through Siri, Shortcuts, or the Action Button, your spoken or

typed request is first handled by Apple's system services and then passed to

Premsys. Apple's privacy policy governs that step. Once the text reaches

Premsys, it is processed on-device like any other message.

5. DEVICE PERMISSIONS AND HOW EACH ONE IS USED

Every permission below is optional, is requested only at the moment you first

use the feature, and can be revoked at any time in iOS Settings > Privacy &

Security. The Today dashboard never triggers a permission prompt on its own —

you connect each source by tapping its card. Sources you have not connected are

omitted from AI prompts entirely.

Microphone and Speech Recognition. Used for dictation in the composer and for

transcribing audio files you attach. Transcription is forced to on-device

recognition; the app refuses to fall back to Apple's server-based speech

recognition. Your voice audio is not uploaded by Premsys.

Health (HealthKit). Read-only. Used to display your dashboard and to let the

on-device model answer your questions about your own data. You choose which

metrics to share in Apple's Health permission screen.

- Premsys never writes to, adds to, or modifies Health data.

- Health data is never transmitted off your device by Premsys — not to us,

not to the search relay, not to any third party, under any setting.

- Health data is never used for advertising, marketing, remarketing, or any

similar service, and is never used for data mining or sold, shared, or

disclosed to any third party, including data brokers, information

resellers, or advertising platforms.

- Health data is used solely to provide the app's dashboard and on-device AI

functionality for you.

- Revoke access at any time in iOS Settings > Health > Data Access & Devices.

Calendar and Reminders. Read access is used for the dashboard and for

on-device summaries such as "Brief my day." Premsys creates an event or a

reminder only when you explicitly ask it to. Calendar and reminder contents are

never sent off the device.

Location. Approximate location only, and only while you are using the app, and

only if you connect Weather. See Section 4.3.

Photos, Videos, Files, and Documents. Media and documents you select are copied

into the app and processed on-device (image analysis, OCR, frame sampling,

document text extraction). Nothing you select is uploaded. When you browse

Files, iCloud Drive and installed providers such as Dropbox or Google Drive may

appear in Apple's file picker; those services are governed by their own

policies, and Premsys receives only the specific file you pick.

6. WHAT WE DO NOT DO

- We do not collect analytics, usage statistics, crash telemetry, event

logs, or diagnostic uploads. The app contains no analytics, attribution, or

crash-reporting SDK of any kind.

- We do not serve advertising and do not integrate any ad network.

- We do not track you across apps or websites and use no tracking domains.

- We do not build advertising profiles or behavioral profiles.

- We do not sell personal information, and we do not "share" personal

information for cross-context behavioral advertising as those terms are

defined under U.S. state privacy laws.

- We do not use your content to train, fine-tune, or evaluate any AI model.

Your conversations never reach us, so they cannot be used for training. The

on-device models do not learn from your data or change their weights.

- We do not have a mechanism to read, recover, or restore your data, and we

cannot recover data you delete.

7. CHILDREN

Premsys is not directed to children under 13, and we do not knowingly collect

personal information from children. The app collects no personal information

from any user, so there is no children's data for us to hold. Premsys is a

general-purpose AI assistant whose on-device models can produce mature or

inaccurate content; please observe the app's App Store age rating, and use

Screen Time and Content & Privacy Restrictions to manage access for minors.

8. YOUR PRIVACY RIGHTS

Depending on where you live, you may have rights to access, correct, delete,

port, or restrict processing of your personal data, or to opt out of sale,

sharing, or targeted advertising (for example under the EU/UK GDPR, the

California Consumer Privacy Act as amended, and similar U.S. state laws).

Because Premsys stores no personal data on any server we control and holds no

identifier that maps to you, we hold nothing to disclose, correct, port, or

delete. You exercise these rights directly and completely:

- Access and portability: your data is on your iPhone. Chats are visible in

the app, and files are accessible via the iOS Files app.

- Deletion: delete individual chats and documents in the app, or delete the

app to erase everything it holds.

- Restriction: turn off any AI function, disconnect any dashboard source, or

revoke any iOS permission at any time.

- Opt out of sale, sharing, and targeted advertising: nothing to opt out of.

We do none of these.

For the limited processing that does occur (the search relay handling a search

phrase and connection IP address in order to deliver a search you requested),

our legal basis under the GDPR is performance of the service you asked for and

our legitimate interest in preventing abuse of our search credential. That

processing is transient and produces no stored record.

If you believe we hold data about you, write to devops@premsys.ai. We will

respond within the period required by applicable law, though in most cases the

honest answer will be that we hold nothing. EU and UK users may also complain

to their local data protection authority.

9. INTERNATIONAL USERS

Premsys processes your content on your own device, wherever you are. The only

cross-border transfer that can occur is a web search phrase you initiate, which

is routed through Cloudflare's global network to Brave Search, whose

infrastructure may be located in the United States or elsewhere. Optional model

downloads and Apple Weather requests are likewise served from those providers'

infrastructure.

10. DATA RETENTION

We retain no personal data, so we have no retention period to state. Your

device retains your Premsys content until you delete it or delete the app. The

search relay retains nothing after a request completes.

11. CHANGES TO THIS POLICY

If we change how Premsys handles data, we will update this policy and change

the "Last updated" date above. Material changes — in particular, any change

that would cause additional data to leave your device — will also be reflected

in the in-app policy text and in the App Store privacy disclosures before the

change ships. Continuing to use the app after an update means you accept the

revised policy.

12. CONTACT

Premsys Inc.

Email: info@premsys.ai

Web: premsys.ai

Questions about this policy, or about privacy in Premsys generally, are welcome

at the address above.