Privacy

Yours stays yours.

Personal computing only means something if the personal part stays private.

OploCloud has not shipped a product yet — which is the reason to publish this now. A privacy position written before there is anything to collect is a constraint on what gets built. Written afterwards, it is a press release.¹

The commitments

Every promise costs something.

A privacy claim is only worth reading if it closes a door the company would otherwise like to keep open. Here is each one, next to what it gives up.

What OploCloud has committed to	What that rules out
Intelligence runs on your device.	No copy of your files, messages and requests sitting on our servers. Nothing to mine, nothing to subpoena, nothing to leak.
No advertising business, ever.	The most reliable way to make money from a personal device is closed to us. Everything OploCloud earns has to come from selling the product.
Your content is never training data.	The cheapest source of training data on earth is off the table. There is no opt-out to bury in settings, because there is nothing to opt out of.
A feature collects what it needs and nothing adjacent.	No data kept for a use we have not thought of yet. When a feature is removed, what it held goes with it.
Nothing leaves the device silently.	No quiet upload you would have to read a changelog to find out about. If a request has to travel, you are told while it happens, not afterwards in a policy.
What we cannot read, we cannot hand over.	No support tool that can open your library, and no way for us to be helpful to anyone who demands it. Including you, if you lose the key.

On-device intelligence

The model comes to your data.

Every assistant faces the same problem: to be useful it has to see your life, and seeing your life normally means copying it somewhere else. Running the model on the hardware you own removes the second half of that sentence.

On the deviceEverything a local model can answer, it answers locally — which is most of it. Your files, messages and calendar are read where they already are.

Off the deviceOnly when a request genuinely exceeds what the hardware can do, and only the part that has to travel. Said plainly at the moment it happens, with the option to stop.

NeverRetained after the answer, attached to your account, sold, or used to train the next model.

How OploCloud intelligence works

Read further

The rest of it.

FeaturesThe protections themselves, each labelled with whether it exists yet. ControlWhat a setting has to do before it counts as a control, and what you can ask us for. LabelsThe disclosure every OploCloud app publishes before it ships, in one fixed format. Transparency ReportRequests from governments for your data. The number so far is zero. Privacy PolicyThe binding document. In preparation, and dated when it is published.