Philiaxis (representative: 中居 里瑛; "we" or "us") sets out below how the iOS and iPadOS app "Himel Agent" (the "App") handles your information, in accordance with the Act on the Protection of Personal Information of Japan and other applicable laws.
Effective date: October 30, 2026
1. Our approach
The App has no servers run by us. Your conversations, memory and settings are stored on your device and are not sent to us. The App contains no mechanisms for advertising, analytics or tracking, and it does not track you across other apps or websites.
We do not provide or sell your information to third parties. Information is sent outside your device only when you use a feature you have chosen, and it goes directly from your device to the destination you have chosen (Section 3).
2. Information stored on your device
- Conversations: the text you send, the images and files you attach, replies, and measurements such as processing time
- Memory and skills: USER.md, MEMORY.md, SOUL.md (persona), skills (SKILL.md) and to-dos
- Settings: display, connection destinations, web search and plugin settings, and downloaded models
- Date of birth: entered at first launch and used only to decide which features are available for your age
- Secrets: API keys for cloud AI and search services, and the DSH server launch token, stored in the iOS Keychain
None of this reaches us. It may be included in device backups (such as iCloud Backup), depending on your iOS settings.
3. Information sent outside your device when you use certain features
Information is sent directly from your device to each destination only when you use the features below. Information you send is handled under each destination's terms of service and privacy policy, which we do not control. Destinations include businesses outside Japan (such as in the United States and China). Because of how network communication works, every destination receives your IP address and the type of your device and app (User-Agent).
- Cloud AI (providers you register, such as DeepSeek, Anthropic, OpenAI, Google Gemini, OpenRouter, Nous Portal, or an OpenAI-compatible API you add): the messages you send, the conversation so far, the contents of attached images and files, instructions that include your persona, memory (USER.md and MEMORY.md), the list of skills and your to-dos, the results of tools (web search results, the contents of fetched pages, and the results of searching past conversations), and your API key. Before the first message to each provider, the App asks for your consent.
- Web search (Brave Search, Tavily, or a SearXNG instance you specify): your search terms and your API key. By default, the App asks for confirmation before each search.
- Fetching web pages: access to the websites of the pages the AI tries to open. By default, the App asks for confirmation before each fetch.
- @Wikipedia (Wikimedia Foundation) and @DuckDuckGo (DuckDuckGo): the terms you look up.
- Searching for and downloading models (Hugging Face, or the host of a URL you enter): your search terms, and requests for the files to download.
- Voice input (Apple): for languages or devices that cannot transcribe speech on the device, your speech may be sent to Apple's speech recognition servers. In conversations with the on-device model, your voice is not sent outside the device.
- DSH server (a server you specify): messages, attachments, and a device identifier (device token) for receiving notifications. DSH may in turn send content to an AI configured on the DSH side.
- Notifications (Apple Push Notification service): if you use the notification plugin of a DSH server, the contents of notifications are delivered via Apple.
4. Information we receive
Only when you contact us by email, or send an email from the "Report" option of a reply, do we receive your email address, the message, and the reply and model name included in the report. We use them only to respond, to deal with bugs and inappropriate replies, and to improve the App, and we delete them within one year after we have finished dealing with the matter. To request deletion, contact us at the address in Section 8.
5. Use of device features
The App uses the following features only when you allow it. You can change these permissions at any time in the iOS Settings app.
- Camera: to attach photos you take to a conversation
- Microphone and speech recognition: to turn your voice into text with 押したまま話す (Hold to talk)
- Adding to Photos: to save images from the share menu
- Local network: to connect to a DSH server or a model server on the same network
- Notifications: to tell you when work in DSH has finished, or when a question or an approval is waiting
6. Withdrawing consent and deleting data
- You can withdraw your consent to sending data to a cloud AI on each provider's screen under 設定 (Settings) › クラウドAPI (Cloud API). Removing a provider also deletes its saved API key from your device.
- Web search, fetching web pages, @plugins and searching past conversations can be turned off in the agent section of 設定 (Settings).
- You can delete conversations from the conversation list, and memory and persona from 設定 (Settings) › 記憶と人格 (Memory and persona).
- Deleting the App also deletes the conversations, memory and models on your device. To be sure the API keys in the Keychain are erased, remove the providers before deleting the App.
- To have information you sent to an outside destination deleted, contact that destination.
7. Children
The App is intended for people aged 13 and over. At first launch the App asks for your date of birth, and people under 13 cannot use it. People under 18 cannot use Hugging Face search or add models from a URL or a file. Your date of birth is stored only on your device and is not sent to us or to any third party.
8. Contact
Philiaxis (representative: 中居 里瑛)
Email: support@philiaxis.com
9. Changes
When we change this policy, we will announce the revised content and the date it takes effect in the App and on the published page (https://himel.philiaxis.com/legal/privacy/).