Privacy
This page is the public summary version of the launch privacy draft. It focuses on the real data boundary: local device posture data stays local, while server-side systems are limited to account, billing, and license operations.
Related docs
These pages are the current customer-facing trust and disclosure set for launch prep.
Trust Center
Start here for the product boundaries, review status, and shareable customer docs.
Privacy
What stays on-device, what can reach servers, and what we do not collect.
Terms
Use boundaries, planned billing posture, and launch-stage legal notes.
Data Handling
Plain-language storage, retention, and processing boundary summary.
What stays on-device
What can reach our servers
What we do not collect
User control
These controls are part of the architecture, not optional trust language.
Local control
Local posture data lives in the app's local store and can be cleared by the user. The server has no copy of raw behavioral events to recover later.
Sharing control
Any future team sharing remains opt-in and aggregate-only. The operating rule is that manager views do not expose individual browsing or event timelines.
Draft status
This page is not yet the final effective privacy policy. It is the public summary of a draft disclosure that still requires counsel review, final contact details, and jurisdiction-specific updates for EU and state privacy rules.