Privacy & ownership

Control you can
put to the test.

Privacy starts with where the work happens. InHouse’s local model path keeps inference and conversation history on your computer, with deliberate choices for anything beyond it.

Ownership should
show up in the controls.

The desktop app is still in alpha development. These are the behaviors to inspect in a candidate build, not a blanket security or compliance certification.

Local operation

Disconnect and keep working

After installing a compatible model and runtime, disconnect from the internet and test local chat. Your history should still be there.

Data portability

Save your own copy

Export a conversation and open the file. Save a workspace backup, read its scope, and keep it somewhere you control.

Explicit access

Review what a tool can do

Inspect an extension’s permissions. Check which project or files it can reach, and revoke access when you’re finished.

The details matter.

Local operation has a specific meaning. So do downloads, outside services, and the limits of deletion.

What happens when I send a message?

With an InHouse-managed local model, your prompt and the conversation context are processed by the model on your computer. There is no automatic cloud-model fallback. Connections to separate inference services are outside the initial alpha’s interface.

Does InHouse need the internet?

Finding and downloading models needs a network connection. Once the required model and runtime are installed, local chat can work offline. Local-only mode blocks InHouse’s non-local connection paths. This setting does not control other apps on your computer.

What leaves my device when I search for a model?

An explicit Hugging Face search sends the search terms to Hugging Face. Reviewing and downloading a file contacts its source. These actions do not send your conversations or project documents.

Can an extension read everything?

Extensions must request the capabilities they use. Review the scope before granting access, and revoke it when it is no longer needed. A model’s suggestion does not grant permission. Review proposed workspace changes before applying them.

Can I take my work with me?

Chats can be exported, and workspace backups retain conversations, projects, documents, and selected settings. Model files, credentials, and permission grants are excluded from workspace backups. Keep backups in a location you control.

Does local mean encrypted or invulnerable?

No. Running locally does not protect a compromised computer or automatically encrypt every stored file. Use your operating system’s account controls and disk encryption where appropriate. Deleting app records is not guaranteed secure erasure of operating-system storage or backups.

What about this website?

Website forms are separate from the desktop workspace. The inquiry form sends the information you submit; the alpha notification form asks only for your email and permission to send one email when the alpha opens. Google measurement stays off until you allow it, and declined measurement stays off. Signup details are not sent to Google. Change your measurement choice in the footer. See the website privacy policy for details.