Skip to content

What leaves the device

TODO: the truthful answer. This page must enumerate every network call the Hub and Companion make in normal operation, even ones the user might not expect:

  • Sparkle update check (appcast hit, no payload)
  • License server check (CM050, signed license file)
  • Ollama / model registry pulls during install only
  • Any optional cloud routing the user has explicitly enabled (e.g. Anthropic Haiku for non-personal queries, when wired up)
  • Crash reports (only if user opts in)
  • Plausible analytics on the marketing site (NOT the Hub – the Hub does no analytics)

Be honest about what we send, when, and why. If we cannot justify it on this page, we should not be sending it. This is the page Andy points auditors at.

Owner: @andy. Cross-reference: the recent "clarify network usage across all privacy pages" commit on the marketing site, and Lester Lim's forthcoming security review.