Local-first does not mean network-free
Local models, documents, indexes, and conversations can remain on your device. Optional features can communicate with local-network, iCloud, Apple, Noema-operated, enterprise, or third-party services. This page describes those feature data paths; the Privacy Policy governs collection, retention, and legal terms.
Feature-by-feature data flow
| Feature | Destination | What may be sent |
|---|---|---|
| Local models and RAG | Your device | Nothing leaves for generation or local retrieval. |
| Local Python, Memory, Calculator, Converter, Charts | Your device | Tool inputs and results remain local; Python has no network access. |
| Downloads | Selected model, dataset, or voice source | Asset identifier and normal connection metadata. |
| Web Search | Selected search service and source reader | Query, locale, controls, candidate URLs or snippets, source references, and open/find parameters. |
| Remote endpoint | Configured provider | Prompt, relevant chat and system context, supported attachments, tools and results, and retrieved excerpts. |
| Autopilot remote router | Configured router | Each evaluated message, limited routing context, and capability information. |
| Autopilot escalation | Configured stronger model | Prompt and context needed for the answer; knowledge excerpts only when explicitly allowed. |
| Relay over LAN | Local network and paired Mac | Text prompt, model selection, and streamed response. |
| Relay through CloudKit | Private iCloud container and paired Mac | Relay envelopes needed to deliver prompts and responses. |
| Apple Speech | Apple speech-recognition system | Audio may be processed by Apple when on-device recognition is unavailable or not required. |
| Local Whisper | Your device | Audio and transcripts remain local after download. |
| Remote audio model | Configured provider | Media required for transcription. |
| Calendar | Device Calendar store | Reads and confirmed writes use OS calendar permissions. |
| Enterprise enrollment | Organization service | Enrollment credentials, policy state, catalogs, and managed dataset requests. |
| Advertising attribution | Service named in the Privacy Policy | Limited install or campaign attribution described by that policy, excluding conversations and documents. |
Off-grid Mode
Off-grid Mode blocks external HTTP and HTTPS traffic initiated through Noema’s network stack. Local generation, local retrieval, and local tools continue to work.
- Web Search, remote endpoints, remote Autopilot routing and escalation, and new downloads stop.
- Remote speech and audio services stop.
- Local LAN and managed enterprise behavior can still be subject to platform or organization policy.
- Off-grid Mode does not guarantee that separately launched software or operating-system services are isolated.
Accounts, deletion, and support
Personal local use does not require a Noema account. Third-party providers, iCloud Relay, Apple services, enterprise workspaces, and external tools may require accounts governed by their own terms.
Deleting a local chat or dataset removes Noema’s local copy. Material previously sent to another provider remains subject to that provider’s retention policy. Review diagnostic exports before sending them to support.