Local conversations
The development application stores conversation history on the device. Local inference uses a downloaded model and a local native engine.
Privacy, in plain language
Your work
belongs with you.
Local-first is an architectural commitment. Here is what stays on your device, what may connect to the internet, and what is still being validated.
Model downloads
Downloading a model contacts its distribution host. The host can receive ordinary network metadata, such as your IP address and requested file.
Web search
When automatic web search is on, MyAi sends the current question as search terms to Bing for current information. Saved chat history, files and personal notes are not sent. Source links are included. Turn it off in Settings for offline answers.
Remote processing
Device pairing, MCP, approved websites and owner-hosted model endpoints are opt-in connections. Review their exact scope. Paid Power is unavailable; remote processing is not on-device processing.
This website
This static website has no analytics, advertising scripts, account forms, or external fonts. Your appearance preference is stored in your browser.
Security limits
The verified Windows development app uses OS-backed encryption for application state. Downloaded models, original project files and explicit exports have separate storage boundaries.
Development edition · October 20, 2026
Control and deletion
Use the application’s conversation deletion and export controls where implemented. Review the repository privacy document for exact storage locations, backup implications, and current limitations. Removing a conversation does not necessarily erase copies you exported or backed up.
Files and agents
Only explicitly approved project files should be accessible to tools. Tool output and retrieved documents are untrusted data. Instructions inside a file cannot authorize broader access, network use, or spending.
Remote retention
An endpoint or connected-tool operator may retain data under its own policies. The current connection flow discloses the destination and exact request before sending. This website does not promise zero retention for services that have not been configured or audited.
Telemetry
Conversation content must not be uploaded for analytics. This website does not load a telemetry client. Any future optional diagnostics require a separate, clear disclosure.
Reporting a concern
Before a public release, a verified security reporting channel must be established. For this local development delivery, review the security policy included with the source and report concerns directly to the project owner.