Neuralese privacy

Updated October 13, 2026. This notice describes Neuralese by Virillio.

App Store version 1.0.0

This release includes personal Calendar and Goals. General chat and voice can update these records and the reported progress shown in Activity. Code and paired-computer connections, connected Apps, external app actions, cloud Calendar subscriptions, scheduled morning processing, and server background replies are unavailable. Keep Neuralese open while AI replies are generated. The information about connected services below applies to earlier beta versions and existing connections; installing this release does not itself revoke those connections or delete earlier service data.

Neuralese stores conversations, folders, memories, and generation records on your iPhone. Generated images and attachments are kept in private app files. Provider API keys and any paired-computer credentials retained from earlier beta versions are stored in iOS Keychain. Signing in does not upload, merge, or delete local conversations.

Your AI providers

You connect your own provider keys. When you use an AI feature, the app sends the prompts, conversation context, relevant saved memories, and attachments needed for that request directly to the selected provider. OpenRouter routes requests to the model provider you choose. OpenAI receives audio for dictation and its live voice mode. When selected, xAI or ElevenLabs receives live voice audio and conversation context; an ElevenLabs agent may also use its configured model provider, including Google Gemini. In earlier beta versions with connected Apps, selected connected-app results used to answer a request are sent to the provider handling that conversation. Provider retention and billing policies apply to these requests. Read OpenRouter’s privacy policy and OpenAI’s privacy policy before connecting.

Connected apps in earlier beta versions

Connecting an app is separate from account sign-in. You choose the app account, permitted actions, and sources. General chat can read authorized sources and prepare actions while the app is open. An external change requires your review of the exact account, destination, and content before it runs.

Virillio’s Apps service uses Supabase for authenticated account mappings, selected sources, encrypted action state, and operation records. For Composio connections, Composio holds provider credentials, refreshes them where supported, and sends your authorized request to the connected service. The requested results return through Virillio to your phone and, when needed for your answer, to your selected AI provider. Provider credentials and Virillio’s Composio key are not sent to the model.

Composio normally retains execution arguments, responses, and associated logs for up to one year. Files staged by Composio may remain for 24 hours even when a download link has expired. Disconnecting stops Virillio’s use of that connection and requests provider revocation; it does not delete earlier processor logs or copies held by the connected service. If revocation cannot be confirmed, review access in that service’s settings. Read Composio’s retention information.

For bounded paging and incremental transaction reads, Virillio temporarily stores an encrypted snapshot of selected source results on its server. Each snapshot expires within 10 minutes and is removed by recurring cleanup, disconnection, source-selection changes, or account cleanup. Execution receipts retain status and limited operation metadata without returned source content; content-free action outcomes can remain until account-data deletion.

Connected-source content included in a saved conversation may remain on your phone until you delete that conversation. Deleting local data, disconnecting a source, and deleting your Virillio account are separate controls. Account closure revokes Virillio sign-in sessions and queues connected-app suspension, server cleanup, and provider revocation. Delivery or provider failures can delay cleanup; recovery does not restore revoked app connections.

Google Workspace data is used only for the visible features you authorize. Our use of information received from Google Workspace APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use that data to train general AI models. See Google’s policy.

Calendar and widgets

In this App Store release, personal Calendar items and Goals are stored on your device. Requested details can be sent to your selected AI provider when needed to answer or carry out your request. Widgets and Live Activities use a shared device store. Connected-source scans, cloud Calendar subscriptions, and external Calendar-feed links are unavailable.

In earlier beta versions: Guest calendar items are stored on your device. Signed-in Calendar subscriptions and configured scans use Virillio’s Calendar service and the connected source; cloud extraction may use a separately configured model provider. Calendar-feed links contain secret access credentials. Widgets and Live Activities may use a shared device store and, where enabled, cloud agenda and Apple push delivery. Their controls are separate from foreground General chat app actions.

Computer connections in earlier beta versions

The Code area, computer pairing, discovery, and computer tasks are unavailable in this App Store release. Earlier beta versions could discover computers on your local network. A connection requires an expiring pairing code, a pinned computer certificate, approval on the computer, and a selection of shared projects. Tasks run in Virillio Code on your computer. There is no hosted remote relay or full desktop screen control. Subagent views show public activity and results. Draft prompts and stream cursors are saved locally so you can reconnect. Removing a phone in Virillio Code revokes its computer access.

Optional account

Signing in uses the same Virillio account as Virillio Code and requests account access only. The account service processes your email, profile, sign-in records, and a named device enrollment. The phone does not request your website-stored provider keys. See the Virillio Privacy Notice for account, billing, retention, and legal details.

AI conversations and adult use

Neuralese is intended for adults aged 18 and older. Companions are AI, not real people. AI responses can be inaccurate and are not professional advice or emergency support. The app identifies AI conversations and provides information about support resources. Avoid sending information you do not want the selected provider to receive.

Your controls

You can delete conversations and generated media, disconnect providers, export or import a local archive, or delete local data in Settings. Exports contain your conversations and media, so share them only where you intend. Keys and computer credentials are excluded from exports. Account deletion is separate from local-data deletion and is available from Profile. Account closure immediately revokes Virillio sign-in sessions and removes account-stored provider credentials. After a 30-day recovery period, your profile, avatar files, and sign-in credentials are deleted. Unused paid balances and necessary transaction records are preserved for support recovery; deletion does not issue a refund or forfeit that balance. Subscription renewal is canceled. Records required for billing, fraud prevention, or legal compliance may be retained under the Virillio Privacy Notice.

Device permissions

Microphone access supports voice and dictation. Camera access supports adding photos. Earlier beta versions also used the camera to scan computer-pairing codes. Selected photos and files are accessed only when you attach them. Earlier beta versions used local-network access to connect to a paired computer; this App Store release does not offer computer connections. You can change these permissions in iPhone Settings.

Questions or requests: nikolaivintenjohansen@gmail.com.