Skip to content
Bedrova bedrova
FeaturesCompatibilityDevelopersCompareDocs Coming soon

Docs

Privacy & security

What stays on your Mac, the scoped privacy claim, and how to verify Bedrova for yourself.

Bedrova is private by default. This page is the docs summary; the plain-English version for everyone is on the Trust & privacy page, and the page-by-page detail is split across Network calls, Model trust, and Data & file locations.

The claim, stated precisely

No telemetry. Your chats, models, and files never leave your Mac. Prompts, chat history, documents, OCR output, search indexes, perception artifacts, audio, generated images, file paths, and secrets stay on-device. There’s no silent analytics.

The claim is scoped, not absolute — and we say so on purpose. Two things do reach the network, both disclosed and controllable: model downloads (Hugging Face) and opt-in update checks (Sparkle). Neither sends your content. “Sends nothing” would be false, so we don’t claim it. The full list with what each call carries is in Network calls.

What stays local

Everything you create or feed the models. Document parsing, visual search indexing, perception analysis, transcription, and image generation happen on-device, and the local server answers only on 127.0.0.1 until you explicitly expose it.

Model trust

Downloaded and imported models are quarantined and verified before they run, and trust_remote_code is off by default so no arbitrary repo code executes. The details — quarantine, signing, provenance, and SBOM — are in Model trust & verification.

Closed-source, but verifiable

Bedrova is closed-source and free. Instead of source access, trust comes from verification you can do yourself:

  • Read the full network-calls list and confirm it with Little Snitch or tcpdump.
  • Inspect a model’s recorded provenance and hashes.
  • Export a diagnostics bundle to see build id, git SHA, and pack versions — it redacts prompts, files, and secrets.

macOS security

Shipping builds use the hardened runtime and are signed and notarized by ideius. Microphone access, file access, and external-volume access use the standard macOS permission and security-scoped-bookmark mechanisms. Secrets live in the Keychain, never in plain settings or exports.

See also