Metis Privacy Policy
Updated November 11, 2026 · AIFELIX INC.
Who we are
Metis is operated by AIFELIX INC., the operator of Flashlit. This notice explains how Metis handles your information. Metis uses your Flashlit sign-in, but its journals and voice features are separate from your Flashlit reading library. Contact admin@flashlit.ai with privacy questions.
Account and device information
Auth0 handles sign-in and provides an account identifier and access credentials. Your chosen sign-in provider may process your email and profile information under its own policy. Metis stores its credentials in this device’s Keychain. We and our infrastructure providers process technical information needed to deliver and secure the service, such as network addresses, request times, and error or security events. When you use the dedicated Metis Apple sign-in, the Metis account service completes the authorization exchange with Apple on Auth0’s behalf. It verifies the Apple identity and stores the resulting authorization token encrypted to support revoking that authorization when you delete your Metis account. The token is not sent to the AI guide or included in your app profile. Revoking this dedicated Metis authorization does not delete your shared Flashlit identity or reading library.
Age and terms acknowledgments
Metis is for people aged 16 or older, subject to any higher local requirement. Users aged 16–17 must review the terms with a parent or legal guardian and obtain their acknowledgment. Metis stores an account-scoped terms receipt on this device and in its account service: age band, terms version and fingerprint, client acceptance date and server receipt time, document and interface languages, app version and build, and terms, safety and guardian acknowledgments. We do not collect a birth date or guardian identity for this step. This declaration does not independently verify age or guardianship. The local receipt is excluded from device backup. Account deletion removes the terms receipt; a minimal pseudonymous deletion record remains to prevent restoration of deleted data or silent recreation of Metis access. Contact admin@flashlit.ai about underage use or consent.
Your voice and recordings
Evening-review speech is transcribed on this device with Apple speech recognition. Metis sends the recognized words, not microphone audio, to the online guide. Creating a personal voice is different: with your permission, Metis uploads a short recording to its preparation service once to create a voice profile. The service processes the recording in memory and returns that profile. Saved profiles and subsequent speech synthesis run on your device. Reference recordings and generated audio may remain in this installation until removed. Do not submit another person’s voice without their permission.
Journals and AI processing
The online guide receives your recognized words, relevant conversation history, selected language, time zone, and operation identifiers through the Pythagoras service running on servers operated by AIFELIX INC.. A voice-command classifier decides whether your words request a call control or a journal response. OpenRouter and the selected model providers process text for these features. The journal service stores conversations and supporting state remotely; Metis also saves a local copy and pending requests for recovery. Affirmation and coaching generation also sends your prompts to the Metis gateway, OpenRouter, and the selected model provider. These AI features are not entirely on-device or end-to-end encrypted between you and the model.
Choices and permission
Metis requests microphone and speech permissions when needed. You can control these permissions in iOS Settings. Voice preparation requires your permission before uploading a recording. Metis explains online text processing before it is used; you can withdraw online text permission in Account & privacy. The online guide cannot operate without sending text. Local notifications are optional and scheduled on this device. Withdrawing permission or signing out does not delete content already stored remotely.
Storage and retention
Your preferred name, saved personal voices, affirmation sessions, preferences, and speech cache are stored in this Metis installation. Local journals are separated by signed-in account. Personal voices and affirmation sessions currently share device storage across Metis sign-ins. Remote journal data is stored by the journal service, including persistence checkpoints and request-recovery records. We do not claim that all provider processing or backups have zero retention. Provider handling depends on their terms and configured settings. We retain information needed to provide requested features and to meet security or legal obligations; contact us about retention or your rights.
Delete your Metis account
Use Delete Metis account in Account & privacy, or during voice setup, to initiate deletion when the deletion service is available. The app asks for confirmation and shows whether deletion is pending or confirmed. A pending request is not a completed deletion. After cloud deletion is confirmed, the app removes this account’s local journal and the device-wide saved voices, affirmation sessions, recordings, and generated-speech cache, then signs out. This also affects anyone else using those device-wide items in this installation. Metis deletion keeps your Flashlit account, books, and reading history. Copies exported outside Metis and local data on other devices must be removed separately. Deleting the app alone does not erase cloud journals. If deletion is unavailable or you need help with data retained by another provider, contact admin@flashlit.ai. We may need to verify account ownership and explain any information retained for legal or security reasons. Current journal and voice-operation snapshots are rewritten as part of deletion. Older recovery snapshots may still contain data; a separate deletion record is applied before restored data can be used. We do not promise immediate physical erasure of all provider backups. Shared Flashlit sign-in remains available solely as needed to recover a Metis deletion receipt; it does not automatically recreate deleted Metis access. Cloud data removal is confirmed separately from Apple authorization. If Apple authorization is still pending, you can remove local data and sign out without signing in with Apple again. The app provides instructions for removing Metis access in Apple Account settings. We retain a minimal deletion receipt to prevent restored access and, when a token is available, retry Apple revocation while the account service is running. A pending Apple authorization is not described as successfully revoked. After local cleanup, the saved receipt prevents that cleanup from erasing other users’ newly created device-wide items again.
Service providers and security
We use Auth0 for identity, servers operated by AIFELIX INC. for the journal service, Cloudflare for DNS and retained migration backups, OpenRouter and model providers for AI text processing, and the Metis preparation service for voice profiles. Provider selection can vary by feature and configuration. Information may be processed in countries other than your own. We use access controls and protections for service credentials, but no service guarantees absolute security. Avoid providing sensitive information about yourself or others that is unnecessary for the feature.
Purposes and legal bases
We use account and session information to provide the features you request and administer our agreement with you. Where applicable, we rely on consent for optional permissions and the disclosed transmission of your text or recording; you can withdraw optional permissions as described above. We rely on legitimate interests in preventing abuse, securing the service and ensuring deleted accounts are not restored, balanced against your rights. Some records may be needed to meet legal obligations. If you choose to include information about health, beliefs or other sensitive matters, avoid unnecessary detail. Metis is not designed to collect medical records or provide healthcare. We do not sell personal information or use journal content for targeted advertising.
Your rights and contact
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information, restrict processing, or make a complaint to a regulator. Contact AIFELIX INC. at admin@flashlit.ai. Never include passwords, access tokens, or verification codes in your message. The Flashlit privacy policy provides additional company information. Material changes to Metis processing will be reflected in this notice and in relevant permission screens.