Privacy, encryption, and what left this computer

Are my chats private? Yes. Your chats, memories, knowledge, and files stay on this computer. Only people who can sign in to your account on it, and apps you give an API key, can see them; a chat answered by one of your paired computers is sent to that computer. There is no Toskar account or cloud, and nobody at Toskar can see your chats or data.

Toskar does not send usage telemetry. Chats, memories, knowledge, files, and specialized AIs are stored in the data directory on this computer. Something leaves only when a feature that goes online is used: a web search or page read, a connected service or MCP server, a database or web API you connected, a model or runtime download, a paired computer that answers a chat or trains, or an external server you configured.

Settings → What left this computer lists each of those, newest first: the search queries, page addresses, what was sent to a paired computer or an external server, and what a connected service was asked. It counts them for the last 30 days.

Run records hold the prompts and tool results of past runs, including that list. Keep run records for sets how long they are kept: 7, 30, or 90 days, or Keep them. Delete run records now removes them at once, and clears cached web searches and pages. Chats are not run records; History in Settings decides whether chats are saved.

Memories and knowledge sources marked This computer only keep every chat that uses them on this computer. Text recognition, meaning search, and training on this computer never send your data elsewhere.

Is my data encrypted? Toskar doesn't encrypt its own files, and encryption isn't required to use it. Turn on your computer's disk encryption to keep chats, memories, knowledge, and files encrypted while the computer is off or locked: FileVault on macOS (System Settings → Privacy & Security), BitLocker or Device Encryption on Windows, and LUKS on Linux. Passwords and keys for connected services are kept in the secrets folder, readable only by your user account.

Websites, model downloads, and online services are reached over encrypted HTTPS connections. Addresses you enter yourself, such as an external server, a webhook, or an MCP server, are encrypted when they start with https://. Traffic between your own paired computers, and from other devices on your network to this computer (local network access), is not encrypted yet; it is protected by pairing and API keys, so use those features on a network you trust, such as your home or office network. Settings → Your data stays private sums this up.