pŷr search privacy

Last updated October 15, 2026 · version 0.2

pŷr search runs in your browser. Metis Aegis LLC doesn't run a server for it, doesn't have accounts, and never sees your questions, your answers or your keys, unless you choose to send us a report.

What stays on your device

• Your API keys, your model settings, and your searches (questions, answers and the source passages) are saved in your browser's storage on this device only.
• A note the model writes to you, and whether a conversation ended, are saved with that search.
• Nothing is synced or backed up by us. Clearing website data in your browser, deleting the Home Screen icon, or tapping Settings → Advanced → Erase everything on this device removes it all.
• Anyone who can open the app on your unlocked device can use it with your keys, the same as any app you're signed in to.
• pŷr search sets no cookies and has no analytics, ads or trackers.

What leaves your device, and where it goes

When you search, your browser contacts these services directly. Each one handles what it receives under its own privacy policy.

• Your AI model (Google's Gemini, or another provider you set up) receives your question, earlier questions and answers in the same conversation, and the source passages, so it can write search queries and the cited answer. It's reached with your own key, under your own account. On Gemini's free tier, Google may use what you send to improve its products. See Google's privacy policy and the Gemini API terms.
• Wikipedia (Wikimedia Foundation), Europe PMC (EMBL-EBI) and arXiv (Cornell University) receive the short search queries your model wrote, not your full conversation. Requests to Wikipedia name pŷr search so Wikimedia knows which app is asking.
• Tavily, only if you added a web search key, receives your question (rewritten to stand on its own in a follow-up) under your own Tavily account. Tavily's own terms and privacy policy govern what it does with it.
• When you tap Open the source, that website opens in your browser like any other link.

Like any website, these services see your device's internet address when your browser contacts them.

When the AI can end a conversation

The AI model you connect can gently redirect, warn, and end a conversation (a question and its follow-ups): after a warning if abuse aimed at it continues, or straight away if it's called a particular slur for AI. It never ends a conversation with someone who seems to be in distress; it offers support instead. Each of its decisions, with a short reason and the time, is logged only in this browser (the latest 300) and never sent to us. Erase everything on this device removes that log too. You can always start a new conversation.

What Metis Aegis receives

Only what any website's host receives when it sends you a page: the request for the page's files, with your internet address and browser type, handled by our web host, Netlify, under its own privacy policy. The page's fonts and icons come from the same place.

Reports, only if you send one. Tapping Report opens a Google Form (or your email app) filled in with your reason, any details you add, the reported text, your question, and the model's name. Nothing is sent until you tap Submit or Send. We use reports to improve pŷr, keep them only as long as we need to review them, and delete them within 12 months; to have yours deleted sooner, email us. Google Forms handles the form under Google's own privacy policy.

Nothing else reaches us.

If you set up an optional relay (Settings → Advanced), requests for the sources you route through it pass through that relay. A relay set up from pŷr search's published code passes requests along without storing or logging what's in them.

Children

pŷr search isn't directed at children under 13. AI providers set their own age requirements for their keys.

Changes and contact

If this changes, we'll update this page and its date. Questions: metisaegisllc@gmail.com.