---
title: "Privacy & Network Activity"
description: "See which Noema features stay on-device, which use the local network, and what optional online services receive."
version: "Noema 3.6+"
platforms: ["iPhone", "iPad", "Mac", "Vision Pro"]
reviewed: "July 26, 2026"
canonical: "https://noemaai.com/docs/privacy-and-network-activity"
---

# Privacy & Network Activity

A feature-by-feature map of local, LAN, iCloud, Apple, Noema-operated, and third-party data paths.

## Local-first does not mean network-free

Local models, documents, indexes, and conversations can remain on your device. Optional features can communicate with local-network, iCloud, Apple, Noema-operated, enterprise, or third-party services. This page describes those feature data paths; the Privacy Policy governs collection, retention, and legal terms.

## Feature-by-feature data flow

| Feature | Destination | What may be sent |
| --- | --- | --- |
| Local models and RAG | Your device | Nothing leaves for generation or local retrieval. |
| Local Python, Memory, Calculator, Converter, Charts | Your device | Tool inputs and results remain local; Python has no network access. |
| Downloads | Selected model, dataset, or voice source | Asset identifier and normal connection metadata. |
| Web Search | Selected search service and source reader | Query, locale, controls, candidate URLs or snippets, source references, and open/find parameters. |
| Remote endpoint | Configured provider | Prompt, relevant chat and system context, supported attachments, tools and results, and retrieved excerpts. |
| Autopilot remote router | Configured router | Each evaluated message, limited routing context, and capability information. |
| Autopilot escalation | Configured stronger model | Prompt and context needed for the answer; knowledge excerpts only when explicitly allowed. |
| Constellation chat sync | Private iCloud database | Chat and project payloads; models, datasets, and source files remain device-local. |
| Constellation Local Network | Your Mac on the local network | Authenticated request, supported attachments, tool exchanges, and streamed response. |
| Constellation Private Link | Your configured private mesh | Request, supported attachments, tool exchanges, and streamed response. |
| Constellation Direct | The other personal device | End-to-end encrypted device-to-device request after CloudKit introduction. |
| Noema Bridge | Noema-operated bridge | End-to-end encrypted traffic relayed as ciphertext; the Bridge does not run the model. |
| Constellation Cloud Relay | Private iCloud database and your Mac | Request, optional bounded image assets, tool exchanges, and reply. |
| Apple Speech | Apple speech-recognition system | Audio may be processed by Apple when on-device recognition is unavailable or not required. |
| Local Whisper | Your device | Audio and transcripts remain local after download. |
| Remote audio model | Configured provider | Media required for transcription. |
| Calendar | Device Calendar store | Reads and confirmed writes use OS calendar permissions. |
| Enterprise enrollment | Organization service | Enrollment credentials, policy state, catalogs, and managed dataset requests. |
| Advertising attribution | Service named in the Privacy Policy | Limited install or campaign attribution described by that policy, excluding conversations and documents. |

## Off-grid Mode

Off-grid Mode blocks external HTTP and HTTPS traffic initiated through Noema’s network stack. Local generation, local retrieval, and local tools continue to work.

- Web Search, remote endpoints, Constellation sync and remote access, remote Autopilot routing and escalation, and new downloads stop.
- Remote speech and audio services stop.
- Local LAN and managed enterprise behavior can still be subject to platform or organization policy.
- Off-grid Mode does not guarantee that separately launched software or operating-system services are isolated.

## Accounts, deletion, and support

Personal local use does not require a Noema account. Constellation uses the Apple Account and private iCloud database already configured on the user’s devices. Third-party providers, Apple services, enterprise workspaces, and external tools may require accounts governed by their own terms.

Deleting a local chat or dataset removes Noema’s local copy. Material previously sent to another provider remains subject to that provider’s retention policy. Review diagnostic exports before sending them to support.

## Related documentation
- [Constellation Connections & Privacy](https://noemaai.com/docs/constellation-connections)
- [Privacy FAQ](https://noemaai.com/docs/privacy-faq)
- [About Noema](https://noemaai.com/docs/about-noema)
- [Remote Endpoints](https://noemaai.com/docs/remote-endpoints)