Clear about what stays local.Precise about what connects.

This policy covers the Obsidian Ridge Labs website and our published applications. Product pages and help guides provide additional detail for individual features. Practices for products still in development will be confirmed before those products are released.

Our approach is local-first, not network-blind: we reduce data movement wherever the product can work locally and identify the cases where a feature needs a connection.

Core AI features are designed to process your content on supported Apple hardware using Apple on-device frameworks or app-bundled models. We do not send your recordings, transcripts, financial history, journal entries, tasks, or decision content to an external AI API for inference.

App content is stored locally by default inside the operating system's app sandbox. Our apps do not require an Obsidian Ridge Labs account, contain advertising, or use advertising identifiers. We do not sell your app content or use it to build advertising profiles.

Some on-device models require a one-time download before they can work offline. A model download requests model files; it does not include the private content you created in the app.

The public Obsidian Ridge Labs website is not an account product and does not receive content stored in our apps. Recordings, transcripts, finances, journals, tasks, and similar in-app material are not sent to this website or to Google Analytics.

To measure how the website itself is used in the aggregate, we load Google Tag Manager (container ID GTM-PGQDN8FM), which loads Google Analytics 4 (measurement ID G-FNL2K6W19T). These services are provided by Google LLC. We use them solely to produce aggregated website statistics, such as approximate counts of visits and page views, which pages are requested, coarse geographic region, referring site or campaign, and general device or browser category.

We do not use Google Tag Manager or Google Analytics to identify you by name, email address, or account; to create a marketing, remarketing, or advertising profile; to measure or target ads on other sites or apps; to combine website traffic with app content; or to sell personal information. We do not share website analytics for cross-context behavioral advertising. We do not assign a Google Analytics user ID, do not enable Google Signals or Google's advertising features for this property, and do not authorize Google to use this property's Analytics data for Google's advertising products.

Google may process technical information that is necessary to generate those aggregate reports. That information can include the pages requested and related timestamps, a cookie or similar client identifier used to distinguish sessions for counting, the referring URL, user-agent or device characteristics, and Internet Protocol address information that Google uses to estimate approximate location. We review Analytics in aggregated form. We do not attempt to re-identify a visitor from those reports, and we do not collect additional personal information through the website for analytics purposes.

Independently of Google Analytics, the service that hosts this website may process ordinary request logs required to deliver pages securely and reliably. Hosting logs do not include content stored inside our apps.

You can limit or delete cookies and similar storage in your browser settings. Google also provides a Google Analytics opt-out browser add-on. Google's processing of information is further described in the Google Privacy Policy, how Google uses information from sites that use Google services, and Google's commitments for Google products. Questions about our use of these tools can be sent to the contact address in section 11.

Local content benefits from Apple's app sandbox, device passcode protections, and the security controls available on your device. Individual apps may add Face ID access or feature-specific encryption. Encryption details are stated per product rather than as a blanket claim across every kind of data.

No device, network, or storage system is immune to every risk. Keep your operating system current, use a strong device passcode, and review optional sync settings in the relevant app.

You can delete local content from the app or remove the app from your device. Where offered, you can turn off diagnostics, disable iCloud sync, or disconnect a Plaid-linked bank. Product help guides explain the controls available in each app. Website traffic measurement is described in section 5, including browser cookie controls and Google's Analytics opt-out add-on.

Removing an app does not automatically delete information already managed by a service you enabled, such as iCloud, Plaid, or the App Store. Use the controls provided by that service where applicable.