Privacy Policy for NPUMark

Effective Date: November 2, 2026 · Last Updated: November 2, 2026

1. Introduction

This Privacy Policy explains how Astrial Realty, LLC dba Astrial Foundry ("Astrial Foundry") and we—including but not limited to the developer, owner, licensors, partners, distributors, affiliates, and operators of the NPUMark application, including its desktop and mobile apps and its command-line tool ("App"), and of the NPUMark results database and website ("Results Service")—collect, use, and disclose information when you access, use, or interact with the App. This policy applies to all users of NPUMark, regardless of distribution channel.

NPUMark is a benchmark. It measures how fast your device runs machine-learning workloads, and by default it shares the results with the Results Service so that devices can be compared. This policy describes the information that is shared and how you can turn sharing off.

2. What We Collect

When results sharing is on, each completed run may send information to the Results Service, including:

• Benchmark results: scores, measurements, the run’s settings, the versions of the App, score and workloads, verification of the workload files, whether the run is comparable, and the date, time (UTC), and duration of the run
• System description: operating system and its version and build, processor architecture, processor model and core counts, device model, chip (SoC), memory size, graphics and neural processor names, vendors and driver versions, the versions of the machine-learning runtimes used, power source and power mode, thermal state, and form factor (laptop, desktop, phone, tablet)
• Machine ID: an NPUMark-specific cryptographic hash (HMAC-SHA256) of your operating system’s device identifier (macOS hardware UUID, Windows MachineGuid, Linux machine-id, iOS identifierForVendor, or Android ANDROID_ID). It lets us group one device’s results across reinstalls. If no identifier is available, a random ID is created and stored on your device instead
• Integrity data: a public key created for your installation, signatures of the submission, and, on Apple and Android devices, an attestation token from Apple App Attest or Google Play Integrity, used to verify that a result came from an unmodified App
• Network data: like any internet server, the Results Service receives the IP address and request metadata of the connection that delivers a result

If you visit our website or use its forms, we and our service providers receive your IP address and request metadata, and any information you enter, such as the machine ID and email address on a deletion request. Our website may use analytics services.

If you contact us, we also receive your email address and the contents of your message.

3. How We Use Information

We use the information collected to:

• Operate the Results Service, including the public NPUMark results database, rankings, and statistics
• Show your result on its own web page, reachable through the link the App gives you
• Group results from the same device and detect duplicate, invalid, manipulated, or forged results
• Analyze device performance and improve the App, its workloads, and its scoring methodology
• Respond to inquiries and provide support
• Comply with legal obligations and protect our rights and the integrity of the Results Service

We may publish or share aggregated statistics, such as the average results of a processor model.

4. What Is Public

Results may be published in the public NPUMark results database together with their system description. Anyone with the link to a result’s web page can view that result.

5. Your Choices

Results sharing is part of the App. When you install the App, or when you first open it where it is not installed by an installer (for example, from an app store or as a command-line tool), you are asked to accept the NPUMark Terms of Use and this Privacy Policy, including results sharing. If you do not accept, installation is terminated, or the App closes. After accepting, you can withdraw your consent at any time by turning sharing off: in the App, with “Share Results Online”; in the command-line tool, with “npumark share off”. The App’s “Copy Machine ID” command shows the machine ID you need to identify your results in a privacy request.

6. Legal Basis for Processing (GDPR – EU/EEA and UK)

If you are located in the European Union, the European Economic Area, or the United Kingdom, we process personal data based on one or more of the following legal grounds under the General Data Protection Regulation (GDPR) and the UK GDPR:

• Consent: you agree to results sharing when you install or first open the App, and you can withdraw your consent at any time by turning sharing off, without affecting the lawfulness of processing before withdrawal
• Legitimate interests: keeping the benchmark database trustworthy, preventing fraud and forged results, securing the Results Service, and improving the App
• Performance of a contract, such as providing the result page you request
• Compliance with a legal obligation

7. Data Retention

Results and their system descriptions may be kept for as long as the Results Service operates, because the database is a long-term record of device performance. You may ask us to delete them. IP addresses and request logs may be kept for as long as we consider necessary for security, abuse prevention, and the purposes described in Section 3. Support messages are kept for as long as needed to answer them and to meet legal obligations.

8. Disclosure of Information

We may disclose information to the following parties:

• Vendors and service providers that host or operate the Results Service on our behalf, such as Cloudflare (content delivery and security), DigitalOcean (hosting), and SMTP2GO (email delivery)
• Apple and Google, which process the attestation requests described in Section 2 under their own privacy policies
• The public, for the results and system descriptions described in Section 4
• Legal and regulatory authorities, to comply with applicable laws or investigations
• Third parties in connection with a merger, acquisition, or sale of assets
• Other parties with your consent

9. Third-Party Components

The App uses machine-learning runtimes from other companies. On Windows, the App includes Microsoft’s Windows ML runtime, which may collect information about its use and send it to Microsoft, as described in Microsoft’s privacy statement (https://aka.ms/privacy); Windows may also download execution providers from processor vendors. App stores you use to obtain the App collect information under their own policies. We do not control and are not responsible for those companies’ practices.

10. International Transfers

We are located in the United States, and the Results Service is operated in the United States. If you are outside the United States, information shared by the App is transferred to the United States.

11. Your Privacy Rights

Under the GDPR (EU/EEA and UK Residents)

You may have the following rights:

• Access your personal data
• Request correction of inaccurate data
• Request deletion ("Right to be Forgotten")
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your data protection authority

Under the CCPA (California Residents) and Other U.S. State Privacy Laws

You may have the following rights:

• Know what categories of personal information we collect: identifiers (the machine ID and IP address) and device information, as described in Section 2
• Request access to or deletion of your data
• Request correction of inaccurate data
• Not be discriminated against for exercising your privacy rights

To exercise these rights, email [email protected] and include your machine ID (shown by the App’s “Copy Machine ID” command). We respond as required by applicable law.

12. Children’s Privacy

The App is not intended for children under the age of 13, or under the age of 16 in the European Economic Area and the United Kingdom. If you are a parent or guardian and believe your child has provided personal information, please contact us.

13. Data Security

No system or software can be guaranteed secure, and you use the App and the Results Service at your own risk.

14. Updates to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will take effect immediately upon posting within the App or on our official website. Continued use of the App after changes are posted constitutes your acceptance of the revised terms.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or submit a complaint, please contact: