Privacy Policy
Effective September 17, 2026 · Last updated September 17, 2026
1. Overview
This Privacy Policy explains how Neywa Labs sp. z o.o. (“Neywa Labs”, “we”, “us” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with Nativ, our native macOS desktop application (“Nativ” or the “App”), and any website or related service that links to this Privacy Policy (collectively, the “Services”). Nativ enables users to download, run, test, and manage open-source artificial intelligence models, including text, vision, audio, and embedding models, on Apple Silicon Mac devices.
This Privacy Policy does not apply to third-party websites, model repositories, models, or services that maintain their own privacy practices. It also does not govern information processed solely on your device that Neywa Labs does not receive or otherwise process.
By downloading, installing, or using the App or the Services, you acknowledge that you have read and understood this Privacy Policy.
2. Definitions
“Content” means any prompt, chat message, file, document, image, audio recording, video, embedding, model output, or other data that you input into, upload to, or generate using models within the App, regardless of modality.
“Diagnostic Data” means the limited technical, performance, and usage information described in Section 4.1.
“Personal Data” or “Personal Information” means information that identifies, relates to, or could reasonably be linked with an identified or identifiable individual, as further defined by applicable law.
3. Our Privacy Commitment
Nativ is designed so that the content you process with local models remains on your device’s hardware, without transmission to Neywa Labs servers or infrastructure. Through the normal operation of the App:
- We do not collect, access, transmit, or store your Content.
- AI inference and related processing occur entirely on your device. Your Content is not routed through Neywa Labs servers or third-party cloud services.
- We do not use your Content for advertising or to train, fine-tune, evaluate, or improve AI models.
- We do not sell Personal Information.
These commitments do not prevent you from voluntarily sending information to us, for example in a support request. If you choose to provide Content or other information directly to us, we will process what you submit as described in this Privacy Policy. Please do not send sensitive Content unless it is necessary for us to assist you.
4. Information We Collect
4.1 Diagnostic Data
To maintain and improve the performance, stability, reliability, and security of the App, we may collect limited Diagnostic Data. Collection requires your consent, which we request the first time you launch the App; you may withdraw or change this election at any time in Settings. Although this information is designed not to identify you directly and is not linked to the substance of your Content, some of it may constitute Personal Information or Personal Data under applicable law, particularly if associated with an IP address, device, installation, account, or license identifier.
The categories may include:
- Device and environment information. App version, macOS version, and hardware configuration, such as Mac model, chip family, and memory size.
- Crash and error information. Crash reports, stack traces, error codes, and similar logs configured to exclude Content.
- Performance information. Inference speed, memory usage, model load time, and similar performance measurements.
- Usage and diagnostic events. Information about which App features, settings, or model formats are used and how frequently, without capturing the content of any session.
We use this information only for App performance, reliability, security, troubleshooting, and product improvement. We do not use it for advertising or AI-model training.
4.2 Model Downloads and Software Updates
- Model Downloads. When you choose to download a model, the App connects directly to the third-party repository hosting that model. The repository may receive the requested model identifier and standard network and device metadata, such as your IP address, request date and time, and user-agent or similar connection information. The repository processes that information under its own terms and privacy notice. Neywa Labs does not control the repository’s privacy practices.
- Update Checks. The App may check for and download software updates. Neywa Labs or its update-distribution provider may receive standard request and server-log information, such as IP address, request date and time, App version, and update version, to deliver and secure updates.
4.3 Information You Provide Directly to Us
We obtain information directly from you; automatically from your device when the App sends permitted diagnostic or network requests; from service providers acting on our behalf; and, where applicable, from an enterprise customer that provides or administers your access to the Services.
- Account Registration Data. If you create an account, we collect the registration and authentication information needed to create, secure, and administer the account, such as your name, email address, and authentication credentials or tokens.
- Licensing Data. To activate, validate, and manage your license, we collect and process a license key, activation and deactivation records, and the number and general category of devices associated with your license (for example, to enforce a limit on authorized devices).
- Purchase and Payment Data. When you purchase a license or subscription, payment is processed by [PAYMENT PROCESSOR NAME]. We do not directly collect or store your full payment card number or other payment credentials unless expressly stated at checkout; your payment processor may collect and store that information subject to its own privacy policy. [We may retain limited transaction information necessary for our own business records, tax and accounting compliance, and customer support, such as an order ID, purchase date, plan or tier purchased, purchase amount, billing country, tax information, and the last four digits of your payment method, which the payment processor may share with us in the ordinary course of processing your purchase.]
- Support and Other Communications. When you contact us for support, report a bug, or otherwise communicate with us, we collect the information you provide, which may include your name, email address, and the content of your communication.
- Website and Marketing Information. If you use our website, request a demo, join a waitlist or mailing list, or interact with marketing communications, we may collect the information you submit and technical information generated through cookies or similar technologies, as described in any cookie notice presented to you.
4.4 Information We Do Not Collect
Regardless of your Diagnostic Data settings, we do not collect:
- The content of your chats, prompts, or conversations with any model;
- Files, documents, images, or audio you upload or reference within the App;
- Model outputs or generations;
- Which specific models you download or use, beyond the aggregate, non-identifying format/category statistics described in Section 4.1.
5. How We Use Information
We use the data and information described in Sections 4.1–4.3 solely to:
- Provide, operate, maintain, and secure the Services;
- Deliver software updates and facilitate user-requested model downloads;
- Diagnose and fix errors, crashes, and performance or compatibility issues;
- Measure aggregate feature usage and improve the App’s performance, reliability, and usability;
- Create and administer accounts, licenses, subscriptions, and transactions, if applicable;
- Respond to support requests and communicate with you about the Services;
- Prevent misuse, fraud, and security incidents, and enforce our terms of service;
- Comply with legal obligations and protect our rights and the rights of others; and
- Evaluate or complete a financing, merger, acquisition, reorganization, sale of assets, or similar corporate transaction.
We do not use Content or other Personal Information for advertising or AI-model training, and we do not sell Personal Information.
6. Legal Bases for Processing in the EEA, UK, and Switzerland
If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR or UK GDPR, as applicable. If you are located in Switzerland, we process Personal Data in accordance with applicable Swiss data protection law:
- Consent (Art. 6(1)(a) GDPR): We rely on your consent to collect optional analytics, performance metrics or Diagnostic Data where you affirmatively enable that collection at first launch or through the App’s settings. You may withdraw your consent at any time through the App’s settings. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.
- Performance of a Contract (Art. 6(1)(b) GDPR): We process Personal Data where objectively necessary to provide the products and services you request under our Terms of Use, such as creating and providing access to an account, activating and managing a license, administering your purchase or subscription, and providing necessary software functionality and updates.
- Legitimate Interests (Art. 6(1)(f) GDPR): We process limited Personal Data where necessary for our legitimate interests in protecting the security and integrity of the App and our systems; preventing fraud, misuse and unauthorized access; maintaining essential operational records; and diagnosing and resolving technical issues, provided that those interests are not overridden by your interests, rights or freedoms.
- Legal Obligation (Art. 6(1)(c) GDPR): We process Personal Data where necessary to comply with a legal obligation to which we are subject, including applicable tax, accounting, corporate-recordkeeping and regulatory requirements and binding legal obligations under applicable Union or Member State law.
Where required by law, we will obtain consent or rely on another appropriate legal basis before processing Personal Data for a purpose that is materially different from the purposes described above.
7. How We Disclose Information
We do not sell your Personal Information. We may share the limited information described in Section 4 in the following circumstances:
- Third-Party Model Repositories: At your direction, the App connects directly to repositories from which you choose to download models. This connection is governed by the repository’s privacy practices, as described in Section 4.2.
- Service Providers: We may share Diagnostic Data with vendors who help us operate the App, such as crash-reporting or analytics providers, update-distribution infrastructure, and payment processor under contractual confidentiality and data-processing obligations.
- Legal and Safety: Where required to comply with law, respond to lawful requests by public authorities, or protect the rights, property, or safety of Neywa Labs, our users, or others.
- Business Transfers: In connection with a financing, merger, acquisition, reorganization, sale of assets, insolvency, or similar transaction, in which case information may be transferred to actual or prospective investors, lenders, advisers, counterparties, and successors, subject to appropriate confidentiality protections where practicable.
- [Enterprise Customers: If an organization provides or administers your access, we may disclose account, license, support, or administrative information to that organization, consistent with the organization’s instructions and your relationship with it.]
We do not disclose Content processed locally in the App because Neywa Labs does not receive that Content through normal App operation.
8. International Data Transfers
We and our service providers may process Personal Information in the United States, the European Economic Area, and other countries where they operate. These countries may have data protection laws that differ from those in your country.
When required, we use a lawful transfer mechanism for Personal Information transferred from the EEA, United Kingdom, or Switzerland, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the United Kingdom’s approved transfer addendum or agreement, or another mechanism recognized by applicable law. You may contact us to request additional information about the safeguards that apply to a transfer.
9. Data Retention
We retain Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. We consider the amount, nature, and sensitivity of the information; the purposes and legal requirements for retaining it; and the risks of unauthorized use or disclosure.
| Category | Retention Period |
|---|---|
| Diagnostic Data | [● days/months after collection] |
| Update and security logs | [● days/months after collection] |
| Account and license records | [Duration of account/license plus ● years] |
| Transaction and tax records | [● years, based on accounting and tax requirements] |
| Support and communications | [● years after the matter closes] |
When retention is no longer required, we delete, deidentify, or securely dispose of the information, subject to backup cycles and legal holds. Content stored locally in the App remains under your control and is not subject to our server-side retention practices.
10. Security
We maintain administrative, technical, and organizational safeguards designed to protect the Personal Information we process against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Because Content is processed and stored locally, the security of that Content depends substantially on the security of your Mac, operating system, user account, and local storage. You should use appropriate device security controls, install security updates, protect your credentials, and maintain backups where appropriate.
11. Your Privacy Rights
Depending on where you live and subject to applicable exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of your Personal Information; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. You may also have the right to appeal our response to a request and to lodge a complaint with a data protection or privacy regulator.
To submit a request, contact us using the information in Section 16. We may take reasonable steps to verify your identity and authority before acting on a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and verification of your identity.
[Neywa Labs does not use Content or Personal Information to train, fine-tune, or evaluate AI models. Neywa Labs also does not sell Personal Information or share or process Personal Information for targeted or cross-context behavioral advertising.] Accordingly, certain opt-out rights may not apply to our current practices. If our practices change, we will provide any notices and opt-out mechanisms required by applicable law.
11.1 EEA, UK, and Swiss Residents
If you are located in the EEA, UK, or Switzerland, you have the right, subject to certain exceptions and limitations, to:
- Access the Personal Data we hold about you;
- Correct inaccurate or incomplete Personal Data;
- Request deletion of your Personal Data;
- Restrict certain processing of your Personal Data;
- Object to certain processing of your Personal Data;
- Receive certain Personal Data in a structured, commonly used, and machine-readable format and transmit it to another controller;
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing conducted before withdrawal; and
- Lodge a complaint with the data protection supervisory authority in the country where you live or work or where you believe a violation occurred.
11.2 California and Other U.S. State Residents
If you are a resident of California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, Virginia, or another U.S. state with a comprehensive consumer privacy law, you may have rights under that state’s law (including, for California, the California Consumer Privacy Act as amended by the California Privacy Rights Act, or “CCPA/CPRA”). Depending on where you live, these rights may include the right to:
- Confirm whether we process your Personal Information and access that information;
- Correct inaccuracies in your Personal Information;
- Request deletion of certain Personal Information;
- Obtain a portable copy of certain Personal Information;
- Opt out of the sale of Personal Information, the sharing or processing of Personal Information for targeted or cross-context behavioral advertising, or certain profiling or automated decision-making activities;
- Limit certain uses and disclosures of sensitive Personal Information;
- Appeal our refusal to act on a request, where applicable; and
- Receive equal service and pricing and not be discriminated against for exercising your privacy rights.
11.3 Residents of Other Jurisdictions
If you are located outside the EEA, UK, Switzerland, and the United States, you may still have rights under applicable local law. We will honor valid requests consistent with this Privacy Policy and applicable law; contact us using the details in Section 16 below.
12. Enterprise and Team Use
If you use the Services through an employer, school, or other organization, that organization may administer your account or license and may independently process information about your use. Its privacy notice and policies may apply to its processing. Unless a separately described enterprise feature is enabled, the local-processing commitments in Section 3 continue to apply to Content processed by models within the App.
13. Children’s Privacy
The Services are not directed to, and are not intended for use by, children under the age of 16. We do not knowingly collect Personal Information from children under that age. If you believe a child has provided Personal Information to us contrary to this section, contact us so that we can investigate and take appropriate action.
14. Third-Party Services and Open-Source Models
The Services may enable you to access third-party model repositories, websites, software, and open-source models. Neywa Labs does not control their privacy, security, licensing, or data practices. Review the applicable terms, model documentation, and privacy notices before using them. This Privacy Policy applies only to Neywa Labs’ processing of Personal Information.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technologies, or legal obligations. We will post the revised version and update the “Last Updated” date. Where required by law, we will provide additional notice or obtain consent before a material change takes effect.
16. Contact Us
For questions, privacy-rights requests, or complaints, contact:
Neywa Labs sp. z o.o.Aleja Pokoju 18D, 31-564 Kraków, PolandKRS 0001261513Email: seb@neywalabs.ai

