Clear about what stays local.
Precise about what connects.

Obsidian Ridge Labs builds its core AI experiences to run on your Apple device. Some optional features use services such as Plaid or iCloud, and this policy explains those connections without hiding them behind a blanket claim.

Effective July 9, 2026

Core AI

On-device

Product content is processed locally for core AI features.

Default storage

Local-first

Your content begins in the app sandbox on your device.

Network features

Disclosed

Optional connections are explained where they are offered.

1. Scope of this policy

This policy covers the Obsidian Ridge Labs website and our published applications. Product pages and help guides provide additional detail for individual features. Practices for products still in development will be confirmed before those products are released.

Our approach is local-first, not network-blind: we reduce data movement wherever the product can work locally and identify the cases where a feature needs a connection.

2. Core AI processing and local content

Core AI features are designed to process your content on supported Apple hardware using Apple on-device frameworks or app-bundled models. We do not send your recordings, transcripts, financial history, journal entries, tasks, or decision content to an external AI API for inference.

App content is stored locally by default inside the operating system's app sandbox. Our apps do not require an Obsidian Ridge Labs account, contain advertising, or use advertising identifiers. We do not sell your app content or use it to build advertising profiles.

Some on-device models require a one-time download before they can work offline. A model download requests model files; it does not include the private content you created in the app.

3. Optional and product-specific connections

The following connections are limited to the feature you choose to use. Disabling an optional feature does not move core AI processing to a remote service.

Echo Chamber

Recording, transcription, summaries, transcript chat, search, and translation run on-device. Audio stored by Echo Chamber is encrypted at rest using AES-256-GCM. Echo Chamber may connect to download a speech model. If you enable iCloud sync, audio is encrypted on your device before it is stored in your iCloud account; iCloud sync is off by default. Obsidian Ridge Labs does not operate a recording server for Echo Chamber.

Vault

Manual tracking, statement and receipt import, financial categorization, forecasting, and AI coaching are designed to run locally. If you enable bank sync, you sign in through Plaid's interface. Vault does not see or store your bank username or password. Plaid receives the information needed to connect your institution, and transaction and balance data passes through Plaid and a secure relay to reach your device.

Vault also offers anonymous diagnostics that are off by default. If you opt in, they contain limited event-name counts and a hashed identifier, not account balances, amounts, merchants, categories, or coach conversations. An optional local AI model download requests model files without including your financial data.

Apple system services

Features you deliberately send to Apple Reminders or Calendar may sync through your iCloud settings. Apple also processes App Store downloads, subscription verification, and purchases. Those services are governed by your Apple account settings and Apple's privacy terms.

4. App diagnostics and this website

Our applications do not include third-party behavioral analytics SDKs. Where an app offers first-party diagnostics, as Vault does, the control is off by default and the app explains what is included before you enable it.

The public Obsidian Ridge Labs website does not load third-party behavioral analytics. Like any website host, our hosting provider may process basic request information needed to deliver pages securely and reliably. That request data does not include content stored inside our apps.

5. Purchases

Purchases and subscriptions are processed through Apple's StoreKit and the App Store. Apple handles your payment credentials and billing relationship. Our apps receive the transaction or receipt information needed to verify a purchase and unlock the relevant features; Obsidian Ridge Labs does not receive your full payment-card number or billing address from Apple.

6. Security

Local content benefits from Apple's app sandbox, device passcode protections, and the security controls available on your device. Individual apps may add Face ID access or feature-specific encryption. Encryption details are stated per product rather than as a blanket claim across every kind of data.

No device, network, or storage system is immune to every risk. Keep your operating system current, use a strong device passcode, and review optional sync settings in the relevant app.

7. Your controls and deletion

You can delete local content from the app or remove the app from your device. Where offered, you can turn off diagnostics, disable iCloud sync, or disconnect a Plaid-linked bank. Product help guides explain the controls available in each app.

Removing an app does not automatically delete information already managed by a service you enabled, such as iCloud, Plaid, or the App Store. Use the controls provided by that service where applicable.

8. Children's privacy

Our products are not directed to children under 13, and we do not knowingly request personal information from children through our apps. If you believe a child has provided information to us through a support interaction, contact us so we can review the request.

9. Policy changes

We may update this policy as products and optional services change. The effective date at the top of this page identifies the current version. Material product-specific changes will also be reflected in the relevant product documentation.

10. Contact

Questions about this policy or a product's data handling can be sent to support@obsidianridgelabs.com. Because app content is generally stored on your device rather than in an Obsidian Ridge Labs account, we may not possess a copy that we can retrieve for you.

Privacy at a glance