Privacy
Local-first by default.
- All data stored locally (SQLite per user) unless you explicitly opt into sync
- BYOK always available — no forced cloud dependency for AI features
- No analytics without explicit opt-in
- No tracking pixels, session recording, or fingerprinting
- When a cloud option exists, the privacy cost is disclosed clearly before you enable it