Docs
Network calls
Every outbound connection Bedrova can make, when it happens, what it sends, and how to turn it off.
Because Bedrova is closed-source, the honest way to earn trust is to list every network call it can make and let you verify the list. This is that list. The plain-English version for everyone is on the Trust & privacy page; this is the reference.
The claim
No telemetry. Your chats, models, and files never leave your Mac. Bedrova makes no silent analytics calls. The only outbound connections are the ones below, and each is either initiated by you or disclosed and controllable.
Every call
| Call | When | What’s sent | Turn it off |
|---|---|---|---|
| Hugging Face metadata + downloads | When you search Discover or download/import a gated model | Your search terms, the repo path, and your HF token if you added one | Don’t search or download; works fully offline once models are local |
| Sparkle update check | On the schedule you set, to check for app updates | App version and update-feed request — no prompts, files, or content | Settings → General (disable or change channel) |
| Runtime-pack updates | When you update or change a runtime pack | The pack id and version requested | Settings → Runtime (pin a version, don’t update) |
| Optional analytics | Only if you opt in | Anonymous, coarse usage events — never prompts, files, or keys; inspectable and deletable before upload | Off by default; never enabled unless you turn it on |
| LAN / Tailscale serving | Only when you enable exposure | Serves your API to devices you allow, behind an access key | Off by default; Settings → Server/API |
Everything else — prompts, chat history, documents, OCR output, search indexes, perception artifacts, audio, generated images, file paths, and secrets — stays on your Mac. There is no call that uploads them.
The named exceptions
The privacy claim is scoped, not absolute, and these are the exceptions it allows for:
- Model downloads reach Hugging Face — that’s how you get a model in the first place.
- Opt-in update checks reach the update feed — disclosed and controllable.
Neither sends your content. Calling this out plainly is the point: “sends nothing” would be a lie, so we don’t say it.
Verify it yourself
Watch Bedrova’s connections with Little Snitch or tcpdump and confirm they match this table.
The step-by-step is on the Trust page. If you ever see a connection not listed here,
that’s a bug — report it via the community.
See also
- Privacy & security — the overall stance.
- Model trust & verification — what happens to a downloaded model.
- Settings → Server/API — the exposure controls.