Canopus is an iPhone and iPad app developed by LifeLayer Apps. This policy explains what the app stores, where it is stored, what it sends and to whom, and how to remove everything.
1.What Canopus is
Canopus is just an interface. It gives the AI you run on your own PC or server a home on your device, but it contains no AI of its own and we do not provide a backend for it. To use the app you enter the address of a server in Settings: one you built and run yourself, or one run by someone you chose to trust, that implements the Canopus API. The AI agent runs on that server, and every reply you read or hear is produced by its models. Canopus does not connect to any other AI service.
We do not operate, host, monitor or have access to the server you connect to. What it does with the data it receives, and what it sends back, is decided by whoever runs it, and its own privacy practices apply. If you did not set up the server yourself, check how its operator handles your data before you connect to it.
2.Data stored on your device
Everything below is kept on your device. We run no server that stores any of it.
- Conversations. Your AI Agent conversations, including the messages you send, the replies you receive, and the text of what was said in voice mode.
- About you. Your name, if you choose to add it under General in Settings, so the agent can call you by it.
- Media. Photos, videos, PDFs and voice recordings you attach, and the media your server sends back, which the app downloads and keeps.
- Settings. Your server address, chosen models and their settings, theme, voice and lock preferences.
- Keys in the iOS Keychain. The key that encrypts the app’s database; if you set a passcode, a salted hash of it (the passcode itself is never stored); and, if you enter one under General in Settings, the access token for your server, which the app sends only to that server’s address.
The app’s database is encrypted, and the database and media folder are excluded from iCloud backup, so your history is not copied to Apple’s servers or to a new phone. There is no account, and nothing is synced to us or between devices. The only copy that leaves your device is a backup you make yourself, to your own server (see section 3).
3.Data sent to your server
Canopus sends data only to the server address you entered, and only to make the features you use work:
- Each time you send a message, the recent conversation (up to the last 40 messages), with your Models settings, the conversation’s own instructions, the name you entered, if any, and your device’s time and time zone. Your server runs the AI agent on it.
- A copy of each photo, video, voice recording and PDF in that conversation. Each file is sent once and kept by your server for later messages; your server reads the PDFs, writes down what is said in recordings and videos (see section 4), and takes still frames from videos.
- In voice mode: what you say, as sound, each time you pause, so your server can turn it into text and tell which language you spoke (see section 4); the text of the conversation; and the voice and settings you chose.
- When you tap Back up to server in Settings: every conversation, archived ones included, with its title, model, instructions and messages, and every photo, video, recording and PDF in it. Your server keeps this one backup, stored however it stores data, until your next backup replaces it. Restore from server downloads it back to your device.
- The instructions you ask the app to improve with Enhance, and, when you delete a conversation, a request to delete the media your server made for it.
When the agent searches the web or reads a page, your server makes those requests, so websites see your server rather than your device. The media it makes comes back to the app from your server.
None of this passes through us. If you reach your server over the internet through a service such
as Cloudflare, your data passes through that service under its own terms. If you enter an
address that starts with http://
rather than https://, the connection is not encrypted, and the app shows a warning
in Settings.
4.Speech recognition
What you say in voice mode, and the speech in voice recordings and videos you attach, is turned into text on your server, by whatever speech recognition it runs. Whether it keeps the sound or the files is up to whoever runs it. Canopus does not use Apple’s speech recognition, and we never receive any of it.
Voice mode uses the microphone only while its screen is open. It keeps going when you lock the screen, and iOS shows that the microphone is in use until you end it.
5.Background activity and notifications
While the app is closed, iOS may wake it from time to time so it can collect media the agent was still making. In the background it contacts only your server. Notifications are created on your device; none passes through us or through a push service.
6.Permissions
The app asks for each of these only when you first use the feature that needs it:
- Camera, to take a photo or video to attach.
- Photo library, to attach a photo or video, or to save one you received.
- Microphone, to talk in voice mode, and to record a voice message or video.
- Notifications, to tell you when the agent has finished.
- Local network, to reach a server running on your own network.
- Face ID, to unlock the app. The check is made by iOS in the Secure Enclave. Canopus never sees, stores or sends biometric data and only receives a yes or no.
7.Third-party services
Canopus contains no advertising network, analytics or crash-reporting SDK. Apart from the server you configured, it talks only to the services below, and only about Canopus Pro.
- Apple (App Store). Canopus Pro is bought through the App Store. Apple processes the payment; we never receive your payment details or your Apple Account.
- RevenueCat. Keeps track of whether Pro is active, so it can be restored on your other devices. RevenueCat receives an anonymous app user identifier along with purchase and receipt data, never your messages, media or server address. See RevenueCat’s privacy policy.
Without Pro, the app shows small banners for our other apps. They are images built into the app, so showing them sends nothing anywhere, and tapping one opens our website in your browser.
8.Data we do not collect
- We collect no personal data through the app, and there is no account. The only data that leaves your device for a service other than your server is the anonymous purchase status described above.
- We never receive your messages, voice, media or server address.
- The app does not track your location or follow you across other apps and websites.
- We do not sell or share data.
9.Deleting your data
You can delete single conversations, or all of them, from inside the app. Erase all data in Settings removes every conversation and file on your device at once. Deleting Canopus from your device also removes its database and media.
iOS keeps Keychain items when an app is deleted, so the database key and the salted passcode hash outlive an uninstall. On their own they reveal nothing, because the database they belong to is gone. To remove the passcode hash too, turn off the lock in Settings before deleting the app.
Data that your server has received is stored, or not, by that server. Deleting it is up to whoever runs it. We have no copy to delete. A backup you made with Back up to server stays on your server when you erase the app’s data or delete the app, so you can restore it later; your next backup replaces it.
10.Children’s privacy
Canopus is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11.Changes to this policy
We may update this policy from time to time. The current version always lives at this address, with the date at the top revised. Material changes will also be noted in the app’s release notes.
12.Contact us
Questions about this policy, or a request to delete data we hold — write to us and a person will answer.
lifelayer.apps@gmail.com
LifeLayer Apps