Local-first does not mean network-free
Local models, documents, indexes, and conversations can remain on your device. Optional features can communicate with local-network, iCloud, Apple, Noema-operated, enterprise, or third-party services. This page describes those feature data paths; the Privacy Policy governs collection, retention, and legal terms.
Feature-by-feature data flow
| Feature | Destination | What may be sent |
|---|---|---|
| Local models and RAG | Your device | Nothing leaves for generation or local retrieval. |
| Local Python, Memory, Calculator, Converter, Charts | Your device | Tool inputs and results remain local; Python has no network access. |
| Downloads | Selected model, dataset, or voice source | Asset identifier and normal connection metadata. |
| Web Search | Selected search service and source reader | Query, locale, controls, candidate URLs or snippets, source references, and open/find parameters. |
| Remote endpoint | Configured provider | Prompt, relevant chat and system context, supported attachments, tools and results, and retrieved excerpts. |
| Autopilot remote router | Configured router | Each evaluated message, limited routing context, and capability information. |
| Autopilot escalation | Configured stronger model | Prompt and context needed for the answer; knowledge excerpts only when explicitly allowed. |
| Constellation chat sync | Private iCloud database | Chat and project payloads; models, datasets, and source files remain device-local. |
| Constellation Local Network | Your Mac on the local network | Authenticated request, supported attachments, tool exchanges, and streamed response. |
| Constellation Private Link | Your configured private mesh | Request, supported attachments, tool exchanges, and streamed response. |
| Constellation Direct | The other personal device | End-to-end encrypted device-to-device request after CloudKit introduction. |
| Noema Bridge | Noema-operated bridge | End-to-end encrypted traffic relayed as ciphertext; the Bridge does not run the model. |
| Constellation Cloud Relay | Private iCloud database and your Mac | Request, optional bounded image assets, tool exchanges, and reply. |
| Apple Speech | Apple speech-recognition system | Audio may be processed by Apple when on-device recognition is unavailable or not required. |
| Local Whisper | Your device | Audio and transcripts remain local after download. |
| Remote audio model | Configured provider | Media required for transcription. |
| Calendar | Device Calendar store | Reads and confirmed writes use OS calendar permissions. |
| Enterprise enrollment | Organization service | Enrollment credentials, policy state, catalogs, and managed dataset requests. |
| Advertising attribution | Service named in the Privacy Policy | Limited install or campaign attribution described by that policy, excluding conversations and documents. |
Off-grid Mode
Off-grid Mode blocks external HTTP and HTTPS traffic initiated through Noema’s network stack. Local generation, local retrieval, and local tools continue to work.
- Web Search, remote endpoints, Constellation sync and remote access, remote Autopilot routing and escalation, and new downloads stop.
- Remote speech and audio services stop.
- Local LAN and managed enterprise behavior can still be subject to platform or organization policy.
- Off-grid Mode does not guarantee that separately launched software or operating-system services are isolated.
Accounts, deletion, and support
Personal local use does not require a Noema account. Constellation uses the Apple Account and private iCloud database already configured on the user’s devices. Third-party providers, Apple services, enterprise workspaces, and external tools may require accounts governed by their own terms.
Deleting a local chat or dataset removes Noema’s local copy. Material previously sent to another provider remains subject to that provider’s retention policy. Review diagnostic exports before sending them to support.