Data and Privacy
After reading this page you will be able to: understand the boundary between local storage and network requests, then choose an approach for sensitive data.
Local-First, Not Fully Offline
Section titled “Local-First, Not Fully Offline”The app stores conversation records in a local database. The file manager reads and writes the local directory you select. Deleting a session affects the session record and does not delete project files on disk. Whether data leaves the device depends on the feature and provider you use.
Actions That Still Connect
Section titled “Actions That Still Connect”| Action | Destination | What it means |
|---|---|---|
| Model request | Selected model provider | Prompt, context, or file content needed for the request may be sent to that provider |
| HuiAI feature | HuiAI services | Automation, account resources, voice, or remote features make feature-specific requests |
| Voice transcription | Recognition service | Audio requests occur when you actively use voice input |
| Public tunnel | HuiAI tunnel relay | Remote pages and commands pass through a relay; a public URL is not a private network |
| Updates | Official CDN, with GitHub as a fallback | Version checks or installer downloads |
| Diagnostics | Crash and diagnostic events may be sent in Sentry-configured builds | Source includes an anonymous installation identifier, startup diagnostics, and conditional throttled log reports |
“Local-first” is not a promise that no information is uploaded. Before using a cloud model, HuiAI service, remote tunnel, or diagnostic feature, check the data boundary against your organization’s policy.
Practical Guidance
Section titled “Practical Guidance”- Prefer a local model for highly sensitive content; do not send original material when the provider boundary is unclear.
- Use read-only or plan modes to review automation, and confirm before writing files or running commands.
- Send diagnostic reports only when you actively choose to report a problem. Review logs for paths, error context, and other sensitive details first.
- Enable public tunnels only when needed, disable them after use, and never publish the URL openly.