Privacy policy

Last updated October 24, 2026

Nyxie Focus (“Nyxie”, “we”) is a mail assistant at focus.nyxie.io. This policy explains, in plain words, what we access, what we keep, and your choices. Questions: privacy@nyxie.io.

What Nyxie can access

When you sign in with Microsoft or Google (Gmail), you approve these permissions:

• Sign in and read your profile (your name and email address), to create your account.
• Read and change your mail, to read new email once, sort it, mark it read, add category tags, and move it into folders, only as your settings allow and only after you choose Go live. Your briefing starts with mail that arrives after you join. For the mail already in your inbox you choose: if you ask Nyxie to show what still matters, it reads only the headers of your inbox mail from the 3 months before you joined (who sent it, the subject line, mailing-list markers and sign-in checks; never the email itself, and no AI) and keeps what looks important (that mail is read and sorted the same way as new mail, and shows in the Before Nyxie tab). If you tap File the rest or File it all (only once you’re live), Nyxie files the rest of your mail from before you joined the way your settings file handled mail (archived or into category folders, marked read and tagged), going by the same headers. If you choose to leave your inbox as it is, Nyxie doesn’t read it. Nothing is ever deleted. So Put them back can return exactly those emails to your inbox, Nyxie keeps a list of their email IDs (no sender, subject or content) until you put them back or the button goes away a week later, then erases it.
• Send mail as you, used only when you tap Send, Reply, Forward or a one-click Unsubscribe.
• Read and answer your calendar, to show today’s meetings and the invites waiting for you in your briefing, a read-only week in the Calendar tab, and to send Accept, Maybe or Decline when you tap one (only after you choose Go live). Your calendar is read when you look and never stored, and Nyxie never creates, moves or deletes an event. Tapping an event opens it in your own calendar.
• Stay signed in, so Nyxie can keep working when you’re not on the page.

iCloud Mail, Yahoo Mail and AOL Mail don’t offer that kind of sign-in for mail apps. Instead you make an app password just for Nyxie in your Apple, Yahoo or AOL account: it opens your mail only (never the account itself), Nyxie uses it to do exactly the things above, and you can remove it any time. Nyxie never asks for your real password.

With Gmail this is one Google permission for mail (“read, compose and send emails”, gmail.modify), one for calendar events (calendar.events), plus your name and email address. It can’t permanently delete mail. Nyxie never moves mail to the Trash by itself; only your own Delete tap does, and you can undo it. The calendar box is optional on Google’s screen: without it everything else works. iCloud, Yahoo and AOL calendars aren’t connected.

What we never store

• The text of your emails, and your attachments. They’re read from your email provider when needed and then discarded.
• Voice recordings from the microphone, the audio of briefings, and link preview pictures.

What we keep, and for how long

• Your account: your name, email address, settings and plan, until you delete your account.
• Account emails: we email you about your account only (welcome, trial ending, payment problems, signing in again), sent from Nyxie’s Microsoft 365 mailbox. Never marketing without asking, and never anything from your mail.
• Billing: payments are handled by Stripe. Nyxie keeps only your Stripe customer reference and your plan’s status, never your card details.
• Wrong app passwords: when someone types a wrong iCloud, Yahoo or AOL app password, we keep the address and time for up to an hour, to stop password guessing.
• Your Microsoft or Google sign-in, or your iCloud, Yahoo or AOL app password: stored encrypted (AES-GCM) so Nyxie can work in the background, until you delete your account.
• People you email: the addresses from your Sent Items and how often you write to them (topped up twice a day from your newest sent mail), so Nyxie knows who matters. Kept until you reset or delete.
• Topics you write about: when you sign up (or ask Nyxie to learn again), Nyxie reads the subject lines of your recent sent mail, never the messages themselves, and the AI suggests a few short topics and the kinds of mail you deal with. Nyxie keeps only those short labels and keywords, which you can change in Settings; the subject lines aren’t stored. Kept until you reset or delete.
• A short record per email: sender, subject, time, how it was sorted (which sorting rule decided and, for Noise, which signals fired, as short codes like “unsubscribe link”), whether you opened it in Nyxie, any follow-up reminder you set, and Nyxie’s short summary. For Noise, instead of a summary, the first line or two of the email (the same preview your mail app shows), with account numbers, codes and passwords hidden. Full account and card numbers (we keep the last 4), one-time codes, passwords and Social Security numbers are hidden before anything is saved. A sign-in or verification code is shown in the app for 15 minutes after it arrives, read live from your email when you look; it is never saved. After 30 days the sender, subject and summary are erased automatically; only an internal reference remains so moved mail can still be put back.
• How you found us: the ad or website that sent you here (from the link’s campaign tags or the referring site) and your answer to “How did you hear about us?”, so we know which channels work. Visits are only counted in daily totals (which pages, the referring site, device type, country and hour); a cookie holding only today’s date counts you once a day. While a page is open it sends a random number, made fresh for that browser tab and kept a few minutes, so we can see how many people are on the site right now. We never keep your IP address and we don’t track you around the web.
• Ideas and cancellation feedback: what you send us from Settings, so we can act on it.
• Error notes: when something goes wrong for your account (say, your mail provider asks Nyxie to slow down), we keep a short technical note of what failed and when, plus simple counts of what Nyxie did (like how many new emails it sorted), for 3 days, so we can fix problems. Never your emails.
• Survey answers: if you choose to answer the optional survey in your briefing, your taps and anything you type, kept with your account so we can read them and reply. Not now and No thanks are remembered so we don’t keep asking. Erased when you delete your account.
• Phone notifications: if you turn them on, we keep your device’s push address and time zone. The push itself is empty; your phone fetches the one-line message from Nyxie, so no email content passes through Apple’s or Google’s push services. In the Nyxie Focus iPhone app, Apple’s push service carries only a general line, like “Someone is waiting on your reply”, never who wrote or what the email says.
• Business plans: the person who pays keeps the list of email addresses their plan covers and a company name. They can see whether each person has signed in and when they were last active, never anyone’s email, summaries or rules. Removing you from the list stops the coverage; your own data stays yours.
• Usage counts: how much AI, voice and mic time your account used each day, how many seconds you actively spent in Nyxie each day (for your 1,000-email time), and whether your inbox was clear at the end of each day (for your streak), as numbers only (no email content), so we can keep the price fair. If you delete your account, they stop being linked to you.
• “Notify me” sign-ups: if you ask to hear when your email provider is supported, we keep that email address and provider only to tell you. Ask us any time to remove it.
• Your corrections (“that was important”), for 30 days, to measure accuracy.
• Your activity: what you did in Nyxie (taps like Got it or Unsubscribe, invite answers, rules, settings changes, going live or pausing), with the sender and subject (or the invite’s title) it was about, so you can review it in Settings → Activity. Kept for 30 days.
• “This is safe” and Release: when you tell Nyxie a flagged email is safe, we keep the sender’s domain, which security checks flagged it, and the email’s sign-in results (the pass/fail verdicts in its headers) for 30 days. Nyxie’s AI reviews these facts, never the email itself, so our team can spot checks that misfire and fix them.
• Emails you send to support@nyxie.io: they stay in our Microsoft 365 support mailbox and are used only to answer you. Nyxie never copies them into its own database.

How your email is processed

• Nyxie runs on Cloudflare (Workers, D1 database, Queues and Workers AI).
• AI: summaries, answers and reply or forward drafts are written by Claude, made by Anthropic, with Cloudflare’s Workers AI as a backup if Claude is unavailable. Voices and speech-to-text run on Cloudflare’s Workers AI. Anthropic receives only the email text Nyxie needs for that summary or draft (drafts are shown to you and never saved by Nyxie), may not train its models on it (under its business terms), and deletes it within 30 days (longer only if it’s flagged for breaking Anthropic’s usage rules).
• How the AI is kept safe, in plain words: AI & your data.
• Nyxie does not use your email to train AI models, and we never sell or share your data or show you ads.
• Google user data: Nyxie Focus’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Gmail data is used only to provide the features you see in Nyxie, is never used for ads or to train AI models, is never sold, and no person at Nyxie reads it.
• Links are checked with Google Web Risk (the service behind Google Safe Browsing): the link’s address is sent with tracking codes removed, never your email, and Nyxie keeps only a scrambled fingerprint of the link (not the link) for a few hours so it isn’t checked twice. Every other link check happens inside Nyxie and sends nothing anywhere. A link Preview opens the link in Cloudflare’s browser only when you tap Preview, with tracking codes removed first when possible.
• Pictures in emails you open in Mail Explorer are fetched through Nyxie on Cloudflare, so the sender sees Cloudflare, not your address. They pass straight through and are never stored, and tiny tracking pixels aren’t loaded. Flagged emails show no pictures.

Google user data (Gmail and Google Calendar)

This section sums up, in one place, what Nyxie Focus does with data it receives from Google when you connect Gmail.

• What we access: with the Gmail permission (gmail.modify): your email messages (sender, recipients, subject, date, body and headers), their labels, and the ability to change labels, mark mail read, move it, send mail you write and move mail to Trash when you tap Delete. With the calendar permission (calendar.events): your calendar events and invitations. With sign-in: your name and email address. Nyxie never asks for full mail access (mail.google.com) and can’t permanently delete mail.
• How we use it: only to provide the features you see in Nyxie Focus: sorting each email into Needs reply, Important or Noise, short summaries and answers to your questions, phishing warnings, the labels and filing you turned on with Go live, sending replies, forwards and unsubscribes you tap, and showing your day and answering invites you tap. Aggregated counts (how many emails were sorted, AI use per day) are used only to run and price the service. Never for ads, profiling, lending or anything unrelated to these features.
• Who we share it with: no one, except the service providers that run these features for you: Cloudflare (hosting, database and backup AI), Anthropic (Claude), which receives only the text of the email being summarized or answered, and Google Web Risk, which receives only the address of a link in your email (tracking codes removed) to check it for phishing or malware. None of them may use it for their own purposes, and Anthropic may not train its models on it. We never sell Google user data or give it to advertisers or data brokers.
• How we protect it: all traffic uses HTTPS; your Google sign-in tokens are encrypted at rest (AES-GCM) with a key held as a protected secret; email bodies are never written to storage; no person at Nyxie reads your email, and our admin tools show account details only, never mail.
• How long we keep it, and deleting it: email bodies and attachments are never stored. The short record per email (sender, subject, how it was sorted, whether it had links or attachments, a summary with account numbers, codes and passwords hidden) is erased after 30 days. Calendar events are read live and never stored. Delete my account (Settings) removes everything immediately, and you can remove Nyxie’s access at any time at myaccount.google.com/permissions.
• AI and Limited Use: Google user data is never used to develop, improve or train AI or machine-learning models, by us or by anyone else, and it isn’t sent to any AI service that trains on it. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your choices

• Preview mode: Nyxie changes nothing in your mailbox until you choose Go live, and you can pause any time.
• Reset: puts back what Nyxie moved and forgets what it learned.
• More than one mailbox (Pro Plus): each mailbox you add is read and sorted the same way as your first, under your account, with the same promises on this page. Removing a mailbox in Settings → Account, or deleting your account, erases everything Nyxie kept for it; the mailbox itself isn’t touched.
• Delete my account (in Settings): permanently removes everything we keep about you, immediately, except your email address, member number and, if you’re a founder, your founder number. We keep those so we know you’ve been here before, and so founders keep their founders’ price for life if they come back.
• Backups: our database provider (Cloudflare) keeps an automatic 30-day recovery history, used only to recover from a failure. Data you delete drops out of it within 30 days and is never restored to bring back a deleted account.
• Revoke access at Microsoft: myapps.microsoft.com (work or school) or account.live.com/consent/Manage (personal).
• Calendar: switch the agenda off in Settings → Sorting (“In your briefing”), or remove the calendar permission at Microsoft or Google; your mail keeps working.
• Revoke access at Google: myaccount.google.com/permissions.
• Remove an app password: Apple at account.apple.com (Sign-In and Security → App-Specific Passwords), Yahoo at login.yahoo.com/account/security, AOL at login.aol.com/account/security.

Security

All traffic uses HTTPS. Sign-in tokens are encrypted at rest, sessions are signed and expire after 90 days without use (Settings → Account → Sign out everywhere ends them all at once), repeated sign-in attempts are slowed down by Cloudflare (which counts them per network address for a minute; Nyxie never sees or keeps the address), and email shown in Nyxie is displayed as plain text, with original emails opened in a locked-down frame that blocks scripts, links and tracking images.

Children

Nyxie Focus isn’t intended for children under 16.

Changes

If this policy changes, we’ll update the date above and tell you in the app’s What’s new.