Third-Party Notice (Android app)

Nyx AI Copyright (c) 2026 NYX LIMITED (registered in England and Wales, company no. 17261427, registered office 70 Clarkehouse Road, Sheffield, England, S10 2LJ). All rights reserved.

This product is licensed under the Nyx AI End User Licence Agreement (EULA) v3.0 (the root LICENSE, packaged as LICENSE.txt). It is proprietary, closed-source software.

This NOTICE file is provided to satisfy the attribution and notice requirements of the third-party components Nyx AI bundles or connects to. A full human-readable summary is in docs/third-party-licenses.md, a machine-generated production dependency inventory is in docs/licenses-inventory.json, and captured per-package licence and notice text is reproduced in docs/third-party-licenses-full.txt. The complete commercial-use review of every lockfile path, every packaged path, native components, and first-use downloads is in docs/commercial-licence-audit.md. Packages for which the distributed npm tarball contains no licence/notice file are identified explicitly in the inventory for release review; this notice does not describe that generated text collection as complete.

---

1. Bundled open-source components requiring attribution

Nyx AI incorporates the following components under the Apache License 2.0. Their licences and any upstream NOTICE files are retained; their use here does not imply endorsement by their authors:

• pdf-parse (Apache-2.0): PDF text/image extraction.
• pdfjs-dist (Apache-2.0): Mozilla's PDF.js. Copyright (c) Mozilla Foundation.
• Puppeteer / puppeteer-core (Apache-2.0): (c) Google LLC.
• @puppeteer/browsers, chromium-bidi, webdriver-bidi-protocol (Apache-2.0): (c) The Chromium Authors. Puppeteer's browser-management and WebDriver BiDi support libraries.
• b4a, bare-events, bare-fs, bare-os, bare-path, bare-stream, bare-url, text-decoder, events-universal (Apache-2.0): (c) Holepunch. The "bare" runtime utilities, pulled in transitively via Puppeteer.
• crc-32 (Apache-2.0): (c) SheetJS LLC. Pure-JS CRC-32.
• detect-libc (Apache-2.0): (c) Lovell Fuller and contributors. C standard library detection.
• readdir-glob (Apache-2.0): (c) Yann Armelin. Recursive readdir with glob filtering.
• tunnel-agent (Apache-2.0): (c) Mikeal Rogers. HTTP proxy tunnelling agent.
• DOMPurify (dual-licensed MPL-2.0 OR Apache-2.0; Nyx AI elects Apache-2.0): (c) Cure53 and contributors. HTML/XSS sanitiser, pulled in transitively via Monaco Editor.

Other bundled components use licences whose conditions are met through the captured full-text notices and component inventory (including MIT, BSD-2-Clause, BSD-3-Clause, ISC, BlueOak-1.0.0, and elected Apache-2.0 terms). BlueOak-1.0.0 specifically requires recipients to receive the licence text or a link; the generated full-text notice supplies it. See docs/third-party-licenses.md.

Build-tool acknowledgements

TypeScript and sharp are used by the build pipeline under Apache-2.0. They are acknowledged here separately from the runtime list because this heading does not assert that those build tools are redistributed in the application.

Native binaries

• @napi-rs/canvas 0.1.80 (MIT wrapper) ships a native Windows PE that statically embeds Skia, ICU, Expat, FreeType, HarfBuzz, Brotli, Highway, JPEG XL, libjpeg-turbo, libpng, libwebp, Wuffs, zlib, libavif/libaom, mimalloc, and Rust crates that include MPL-2.0-covered parser files. Exact upstream pins, licence conditions, binary-attested crate versions, and the upstream tag's missing historical Cargo.lock limitation are recorded in docs/commercial-licence-audit.md. Captured native notices are reproduced in docs/third-party-licenses-full.txt. Exact Source Code Form for cssparser 0.35.0, cssparser-color 0.3.0, and dtoa-short 0.3.5 is provided through the exact public object links in docs/open-source-compliance.md; hashes and resolution evidence are also in that document and the bundled legal/source-offers.json manifest.
• Electron bundles Chromium (BSD-3-Clause + many third-party notices), Node.js (MIT), V8, Skia, and ANGLE under their own licences. The Chromium/Electron notice bundle (LICENSES.chromium.html) generated by electron-builder ships with the packaged application.
• FFmpeg (LGPL-2.1-or-later) is bundled inside Electron as a dynamically-linked, unmodified ffmpeg.dll. Nyx AI does not modify Electron's bundled FFmpeg build. Relevant LGPL notices and licence text are included in LICENSES.chromium.html; this notice is not a grant of rights or legal advice about LGPL compliance. For the current build, Electron is v41.10.5; its exact source tag and dependency pins are at https://github.com/electron/electron/tree/v41.10.5, including the Chromium revision that selects the matching FFmpeg tree. For at least three years from distribution, NYX LIMITED will provide on request the corresponding machine-readable source and the materials required by LGPL-2.1 section 6 for this distributed build, including applicable build scripts or object/relinking materials, for no more than the reasonable cost of physical distribution. The same materials are made available through the exact public object links and hashes in docs/open-source-compliance.md; for a newly staged build those objects may still be publication-pending, and until a link is live the written offer above and the email route below provide them. Request them from customerservice@nyxlimited.com and identify your Nyx AI and Electron versions. NYX LIMITED retains release-gated technical evidence backing this offer (the exact corresponding-source pins, upstream-published digests, and verified hashes for the shipped Electron version), validated against the staged build at release time. The approved upload workflow publishes and reads back those immutable source/relinking objects before it publishes the update manifest; see docs/open-source-compliance.md.
• DirectX Shader Compiler (dxcompiler.dll and dxil.dll) is redistributed unmodified as part of Electron's Windows distribution, which ships these binaries for Chromium's WebGPU (Dawn) shader pipeline. They are built from Microsoft's LLVM/Clang-derived DirectXShaderCompiler project (copyright Microsoft Corporation; portions copyright University of Illinois at Urbana-Champaign, LLVM project) and are used under the University of Illinois/NCSA Open Source License, a permissive licence with no source-provision obligation. The project and its full licence text are at https://github.com/microsoft/DirectXShaderCompiler.
• @vscode/ripgrep bundles a platform ripgrep binary (MIT/Unlicense) with its own notices.

Fonts, icons, grammars, and speech

• Interface icons: some icons are derived from Feather (MIT, (c) Cole Bemis), https://github.com/feathericons/feather. Nyx AI does not display any third-party service logo; integrations are shown with generic glyphs. Where an integration or provider is named in text (e.g. GitHub, Slack), that name is a trademark of its respective owner, used only to identify the integration.
• Fonts: the interface bundles Inter ((c) The Inter Project Authors), JetBrains Mono ((c) The JetBrains Mono Project Authors), and Fraunces ((c) The Fraunces Project Authors), plus KaTeX's KaTeX_* math fonts, all under the SIL Open Font License 1.1 (full text + copyrights shipped as legal/fonts-OFL.txt; source at src/renderer/styles/fonts/OFL.txt). Since 1.5.87, the three interface fonts are now self-hosted / bundled (previously fetched at runtime from Google Fonts), so no font request leaves the machine, and the fonts no longer contact Google Fonts servers.
• Tree-sitter runtime and grammars: tree-sitter-assets/ ships six prebuilt grammar WASMs (JavaScript, TypeScript, TSX, Python, Rust, and Go) plus two explicitly inventoried runtime-engine WASMs. The tree-sitter-wasms@0.1.13 wrapper is Unlicense; every runtime/grammar remains under its own upstream MIT notice. Exact filenames, versions, source commits, npm integrity values, and SHA-256 hashes are recorded in docs/licenses-inventory.json; the full notices (including Maxim Sokolov's Rust notice, and the shared TypeScript/TSX repository notice) are reproduced in docs/third-party-licenses-full.txt.
• Text-to-speech (read-aloud) uses the operating system's own installed voices via the Web Speech API. Nyx AI bundles, copies, or redistributes no voice files and no speech engine; the user's ability to use those voices is governed by their operating system and its applicable terms.

---

2. AI models and inference providers

Nyx AI ships no AI model weights. Models run on the user's own machine (local Ollama) or through a remote endpoint the user configures or selects. A remote endpoint may be a keyless Ollama server or a provider authenticated with the user's own API key (such as Ollama Cloud, OpenAI, Anthropic, or an OpenAI-compatible endpoint). Nyx AI is an orchestrating client and does not redistribute, host, fine-tune, or proxy model weights or outputs as a model provider. It does retain the user's model responses and generated artifacts locally when they are kept in Nyx AI chat history; that local application storage is described in the Privacy Policy.

Each connected model is governed by its own provider's licence and terms, which apply to the user's use of that model through the configured endpoint and, where applicable, the user's key.

Built with Llama

Where a user connects a Meta Llama model (for example Llama 4 / llama4-scout), that model is provided under the Llama Community License Agreement. That licence requires products built on or incorporating Llama models to display "Built with Llama". Whether that requirement reaches a model-neutral client such as Nyx AI, which does not bundle or redistribute any Llama model, can be fact-sensitive; this product displays the notice out of caution:

Built with Llama

"Llama" is a trademark of Meta Platforms, Inc. Nyx AI is not affiliated with, endorsed by, or sponsored by Meta.

Model-specific licence conditions

Model and provider terms vary by exact model and can change independently of Nyx AI. Nyx AI ships no model weights. MiniMax M3 terms reviewed 13 July 2026 permit commercial use subject to licence conditions, including attribution, notice, and revenue-dependent authorisation terms. Nyx AI does not bundle or promote MiniMax models and does not auto-route background or agent work to them. Any model-picker licence note is informational: users must check the current terms for the exact model, provider, account, and intended use.

Trademarks

Model and provider names referenced in Nyx AI, including Llama (Meta), GPT/gpt-oss (OpenAI), Claude (Anthropic), Gemini (Google), Qwen (Alibaba), DeepSeek, Kimi (Moonshot AI), GLM (Z.ai), MiniMax, and Ollama, are trademarks of their respective owners. Their use in Nyx AI is for identification and compatibility only and implies no affiliation, partnership, or endorsement in either direction.

---

This NOTICE is informational and forms part of the third-party attribution materials shipped with Nyx AI. It is not a grant of any additional rights to Nyx AI itself; see the root LICENSE file, packaged as LICENSE.txt.

---

Published by NYX LIMITED, a company registered in England and Wales (company number 17261427), registered office 70 Clarkehouse Road, Sheffield, England, S10 2LJ. ICO registration ZC167877. Contact: customerservice@nyxlimited.com.

Android addendum A1 (3 September 2026, last revised 11 September 2026): what this notice covers on Android

This notice is the desktop application's, kept whole so nothing is lost from it. On Nyx AI for Android the following corrections apply, and where they conflict with anything above, these win.

Nyx AI for Android is not an Electron application. It is an Android application built with Capacitor and a WebView. It bundles no Electron, no Chromium, and no FFmpeg binary of ours, so the Electron/Chromium notice bundle and the FFmpeg LGPL written offer above describe the Windows build only. The Android package renders in Android System WebView, a component of the operating system supplied and licensed by Google or your device maker, not distributed by us.

Components named above that are not in the Android package include Puppeteer and chromium-bidi, @napi-rs/canvas and the Skia/ICU native binary it wraps (an installed-only optional dependency, not packaged), DOMPurify by way of Monaco, pdf-parse, the Holepunch bare runtime, tunnel-agent, @vscode/ripgrep, the tree-sitter WebAssembly grammars, and the DirectX Shader Compiler. Attribution for them stands for the desktop build; none of it applies to what you installed from Google Play.

Read-aloud does not use the Web Speech API on Android. The speech paragraph above describes the desktop, where the browser engine provides that API. The Android System WebView does not, so the feature is implemented through Android's own android.speech.tts, which hands the text to the text-to-speech engine already installed on the device: a separate application, supplied and licensed by Google or your device maker, not distributed by us. The attribution substance above is unchanged and remains true: Nyx AI bundles, copies, or redistributes no voice files and no speech engine, and your ability to use those voices is governed by your operating system and its applicable terms. Only the mechanism named differs.

Fonts. The Android app bundles two variable fonts, Inter and JetBrains Mono, both under the SIL Open Font Licence 1.1. The licence text is in the Library licences tab. Fraunces is not bundled in the Android package. KaTeX and its KaTeX_* maths fonts ARE bundled (added 4 September 2026) under the MIT licence that the katex package and its katex-fonts source carry ((c) Khan Academy and other contributors); the SIL Open Font License statement above describes the desktop build's font bundle and does not describe KaTeX's fonts in this package. They are used to typeset the maths a model writes. KaTeX and its fonts are included in the app package and loaded locally on demand when a reply contains mathematics; no font download is required. The document writers also bundle MathJax 4 (package code Apache 2.0, (c) The MathJax Consortium) and glyphs from its TeX font, whose font material is under the SIL Open Font License 1.1 ((c) MathJax, Inc. and Design Science, Inc., Reserved Font Name MathJax_Main), to typeset equations inside generated Word documents; both licence texts are in the Library licences tab.

Apache-2.0 components in the Android package are pdfjs-dist, docx-preview, @mathjax/src (with mhchemparser, mj-context-menu and speech-rule-engine), the code of the MathJax font packages, crc-32 and readdir-glob; their licence texts are in the Library licences tab.

Where to find the Android dependency list. The JavaScript production dependencies, with their upstream licence texts and font notices, are listed in the app's Legal panel under Library licences. The Android licences tab includes native runtime attribution, embedded notices and version-pinned upstream supplementary texts. These lists are reviewed when dependencies change; a licence allowlist is not itself legal clearance. The desktop paths referenced above (docs/third-party-licenses-full.txt, docs/licenses-inventory.json, docs/commercial-licence-audit.md, docs/open-source-compliance.md, legal/fonts-OFL.txt and src/renderer/styles/fonts/OFL.txt) belong to the desktop repository and are not part of the Android package.

Written offer. For any component in the Android package carrying a licence that entitles you to its source, write to customerservice@nyxlimited.com and we will supply it, or direct you to the upstream project, at no charge beyond the cost of delivery.

On-phone inference on Android (6 September 2026). The APK includes llama.cpp/ggml inference code (MIT, (c) The ggml authors) and the applicable Android NDK C++ runtime (Apache-2.0 with LLVM exceptions). It does not include model weights. An optional direct download provides Qwen3-4B-Q4_K_M from Qwen's official repository on Hugging Face, under its Apache-2.0 licence. This qualifies earlier statements about absent inference components or model distribution for the Android edition; it does not add a Nyx AI licence restriction to third-party rights. Complete upstream llama.cpp/ggml, Qwen and NDK runtime notices are included in the Android licences tab. Pinned source and model provenance is kept with the application's source records. Nyx AI is not affiliated with or endorsed by Qwen, Hugging Face or the llama.cpp contributors. Model output is not a promise of accuracy, tool reliability or fitness for a particular use.