What leaves your device
Nothing leaves your device unless you sign in and turn on sync. Even then, the server receives only ciphertext.
If you never sign in
Section titled “If you never sign in”Everything the app needs to speak (boards, voices, recordings, settings) lives on the device. With no account and no internet, everything keeps working, indefinitely.
If you sync
Section titled “If you sync”- Boards and settings sync as end-to-end encrypted data. The server stores them but cannot read them — not the board contents, not even the board names.
- Voice recordings sync only behind a separate per-person opt-in that is off by default, with the same end-to-end encryption. Opt-in off means zero voice bytes leave the device.
- Synthetic voice models never sync at all. Neural voices are downloaded to each device directly.
What the server can see
Section titled “What the server can see”Your sign-in email (or passkey), and that an account has some number of profiles and devices: the minimum needed to route encrypted data between your own devices.