1. Introduction

This Privacy Policy is specific to Quox Console, the native iOS app published by Quox LTD ("we", "our", or "us"). It explains what the app collects, why, and where it is stored. It does not describe the quox.ai website or the QuoxCORE server software itself, which are covered by our website Privacy Policy.

Data Controller:
Quox LTD
Company Number: 16994929
Suite RA01, 195-197 Wood Street
London, E17 3NU
United Kingdom
Data Protection Contact: [email protected]

2. What Quox Console is

Quox Console is a client app for QuoxCORE, a self-hosted AI agent governance and evidence platform. The app connects to a QuoxCORE instance that you host and control. Quox LTD does not operate that server, with one exception: the optional public demo instances at demo.quox.ai and qluster.quox.ai, which we do run so people can try the app without standing up their own server first (see Section 9).

Because the app talks to a server you choose, most of what it does and stores depends on that server, not on Quox LTD. This policy covers only what the app itself, running on your device, collects and stores.

3. Information we collect

When you add a connection in the app, you enter an email address and password. These credentials are used only to authenticate you against the QuoxCORE instance you specify. They are sent directly to that server, over the connection you configured, not to Quox LTD.

The app itself does not have a signup flow, a Quox-operated account system, or a backend that receives your credentials. If you connect to your own self-hosted instance, your email and password never reach any Quox-controlled server at all.

4. How authentication data is stored

After you sign in, the app stores the resulting authentication token in the iOS Keychain, with the accessibility level kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly. In practice that means:

The token stays on this device only. It is not synced to iCloud Keychain.
It is excluded from iCloud and iTunes/Finder backups that leave the device.
It is only readable after the device has been unlocked once since restart.

We do not receive, log, or have visibility into these tokens. They exist solely on your device and are presented back to your own QuoxCORE server on each request.

5. Locally stored data

Connection labels (the name you give a server, for example "Home lab") and the server URLs you add are stored in local UserDefaults on your device. This data never leaves the device except as part of a normal iOS device backup you choose to make, and is not sent to Quox LTD.

6. Biometric unlock

Quox Console offers an optional Face ID / Touch ID unlock, which is off by default. If you turn it on, biometric matching is performed entirely by iOS. The app never receives your face or fingerprint data, only a yes/no result from the operating system confirming that the device owner is present. Biometric data never leaves your device, whether or not you use this feature.

7. Analytics and tracking

Quox Console contains no analytics, no tracking, no advertising identifier, and no third-party SDK that collects data about you or your device. The app's privacy manifest declares no tracking and no collected data types, with one required-reason API declaration for UserDefaults access (reason code CA92.1, used to store connection labels and URLs as described in Section 5).

8. Content you view in the app

Agent conversations, approvals, fleet status and any other content you view inside Quox Console is fetched live from, and stays on, the QuoxCORE instance you connect to. The app does not copy, cache to a Quox-operated server, or otherwise transmit this content anywhere other than your chosen server and your own device.

9. Quox-operated demo instances

If you connect to the public demo instances (demo.quox.ai or qluster.quox.ai) rather than your own server, the credentials and content described above are sent to and processed on infrastructure that Quox LTD operates for demonstration purposes, and this policy's "sent to your own server, not to Quox" statements do not apply for that connection. Do not use the demo instances for real, sensitive or production data.

10. Data retention

The app retains, on your device only, for as long as you keep the app installed or until you remove a connection:

Authentication tokens: in the Keychain, until you sign out, remove the connection, or delete the app.
Connection labels and URLs: in UserDefaults, until you remove the connection or delete the app.

Deleting the app removes this data from your device. Quox LTD holds no copy of it, because it was never sent to us.

11. Third parties

Quox Console does not share data with any third party. There is no advertising network, no analytics vendor, and no crash-reporting SDK bundled with the app. The only network destination the app talks to is the QuoxCORE server address you enter, which is under your control (or, if you choose it, the Quox-operated demo instance described in Section 9).

12. Children's privacy

Quox Console is not directed to children under 16 and we do not knowingly collect data from them. Because the app collects only what is described above, and only in connection with an instance you or your organisation control, there is no Quox-operated account system for the app to enforce an age gate against.

13. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect a new app version. We will post the updated policy at this same URL with a new effective date. Material changes will also be reflected in the app's release notes.

14. Contact us

For any questions about this Privacy Policy or how Quox Console handles data:

Privacy enquiries: [email protected]
General support: see the Quox Console support page
Address: Suite RA01, 195-197 Wood Street, London, E17 3NU, United Kingdom