Controller
Controller under the General Data Protection Regulation (GDPR):
Visam Jamil
Peter-Rosegger-Straße 10
86415 Mering
Germany
Email: support@getayvo.com
No data protection officer has been appointed. Send privacy requests to the email address above.
Hosting and server logs
This website is delivered through Cloudflare (Workers mit statischen Dateien), provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. For every page request Cloudflare processes technically necessary connection data: IP address, date and time, requested address, amount of data transferred, HTTP status, referrer and browser/system details (user agent). Cloudflare also uses this data to defend against attacks and abuse.
The purpose is secure and stable delivery of the website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Cloudflare processes the data as a processor under Art. 28 GDPR on the basis of its Data Processing Addendum.
Cloudflare may transfer data to the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so transfers rely on the European Commission's adequacy decision (Art. 45 GDPR) and otherwise on standard contractual clauses (Art. 46 GDPR). Connection data is deleted once it is no longer needed for delivery and security. Details are in Cloudflare's privacy policy.
We use no cookies, no analytics or advertising services, no third-party web fonts or scripts and no contact forms.
Storage in your browser
If you choose a colour scheme with the switch in the header, the website stores that choice under the key ayvi-theme in your browser's localStorage. The value never leaves your browser and is not sent to us. The storage is strictly necessary for the function you explicitly requested and is therefore permitted without consent under section 25(2) no. 2 of the German TDDDG. You can delete it at any time through your browser's site data.
Contact by email
If you write to support@getayvo.com, we process your address, your name if given, and the content of your message to answer your request. The legal basis is Art. 6(1)(b) GDPR where the request concerns a contract or steps towards one, otherwise our legitimate interest in answering under Art. 6(1)(f) GDPR. We delete the correspondence once the request is settled and no statutory retention duty applies.
We use processors for this: incoming messages are accepted by Cloudflare Email Routing (Cloudflare, Inc.) and forwarded to our mailbox at Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Replies are sent through Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA); Resend processes sender, recipients and content for this and bases transfers to the USA on its EU-U.S. Data Privacy Framework certification, supplemented by standard contractual clauses. Details: Cloudflare, Google, Resend. Please do not send confidential code or customer data by email.
External links
Links to other websites, such as legal texts or providers, are plain links. Data is transferred only when you open a link; the other site's privacy policy then applies.
The AYVI app: local processing
The AYVI app is a beta for macOS without a public download. It reads selected text or code only when you press the shortcut or start an action, and classifies it on your Mac. Suggested or selected code is never executed. The app sends no usage statistics, crash reports or content to us. An AI service operated by us (“AYVI Cloud”) is not offered publicly; it is used only for internal development tests with a personal access key. We will extend this notice before it is released to users.
With Apple's on-device model (Apple Foundation Models) or a locally running Ollama installation, processing stays on your Mac. If you set up Ollama through the app, the app downloads the Ollama program from GitHub (the Ollama project's releases) and Ollama downloads the model from the Ollama project's servers. Your IP address is transmitted to those servers, but no text. Optional voice input uses on-device speech recognition only.
Optional ghost text
System-wide ghost text is off by default. After explicit opt-in, the app monitors keyboard events to detect pauses and to handle Tab/Esc while a suggestion is visible. Key codes are inspected only while a suggestion is visible; typed characters are neither collected nor stored. After 120 ms without a key press, the app reads at most 32 characters before the caret from the focused text field. Password fields are never read.
Spelling correction runs locally through macOS. AI continuations go only to a local provider; automatic predictions are never sent to cloud providers. The feature needs the macOS permissions Input Monitoring and Accessibility and can be switched off in Settings at any time.
Cloud inference with your own provider
Optionally you can set up a cloud provider such as Anthropic or an OpenAI-compatible service with your own API key. The app then sends the selected content directly to that provider, only after your action and a privacy confirmation. A request may contain the selected text, the chosen action or question, necessary technical details and, for follow-up questions, the previous conversation. Other files or windows are not transmitted. The app never switches silently from local to cloud processing; the setting “Only local models” blocks this route.
The request does not pass through us. The provider processes it under your contract with it and its own terms, possibly outside the EU; retention and training use are determined by the provider. We do not use customer code to train our own models and operate no training service. A local scanner can mask detected credentials before sending; detection is heuristic and can miss items.
Local history and credentials
If conversation history is enabled, the app stores selections, questions and answers encrypted on your Mac; the key is held in the macOS Keychain. You can switch history off and delete it in Settings. API keys are stored in the Keychain. This data stays on your device until you delete it or remove the app data.
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). A request to support@getayvo.com is enough.
Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.
Obligation to provide data and automated decisions
You are not obliged to provide data. Without the technical connection data, however, the website cannot be delivered. No automated decision-making, including profiling, under Art. 22 GDPR takes place.
Last updated and changes
Last updated: 12 November 2026. We update this notice when hosting, app functions or processing operations change. The German version is authoritative.