What we promise, exactly.
Short and checkable. Each line is something you can see for yourself on the box.
- BrainBox, gbrain, and the model server make no network calls.
- The installer turns Homebrew analytics off and runs a bare
ollama serve. - macOS itself calls Apple. We do not change that.
- If you use Tailscale, its coordination server sees device names and keys. It does not see your archive or your questions.
- The guarantee is that you can see every packet. Homenest lists each process and each outbound connection on the box and alerts your phone when the list changes.
- Watch the first week. If you see a connection you did not expect, report it.
- Defects are reported and fixed in the open, in the repository.
Details and the report process: SECURITY.md in the repository.
Questions we get
Does my data leave the machine?
No, unless you turn the cloud path on yourself, and then each answer that used it is labeled.
How do I verify that?
Homenest lists each process and each outbound connection, and any packet tool shows the same.
Do you keep a copy?
No. We do not hold your archive, your index, or your backups.
Does it change my files?
No. Ingest reads your files and writes pages into its own folder.
What about backups?
scripts/backup.sh copies the archive, the index, and the config to a place you name and tests a restore.
Is anything logged?
Yes, on the box: each question, the pages retrieved, the model, and the time, in a plain text file you can read, export, or delete.
2026-09-02T14:11:08 q="lease renewal date for the second shop" pages=[lease-summary, landlord-2026-03-14] model=gemma4:e4b cloud=no t=28.4s