Nothing leaves your Mac.
Local by construction, not by promise.
Know Messenger, Personal, runs the agent and stores the ledger on your own machine. The chat surface talks to a local service on 127.0.0.1 — the same trusted-local path your browser already treats as secure. Know Messenger's cloud side only handles sign-in and conversation metadata; it never sees the agent's input, output, or your files. There's no shared database with anyone else's data because, on the personal tier, there's no “anyone else” — it's single-tenant by construction.
On your metal
Live todayAgent execution and file access happen where your files are: locally.
Local desktop agent
Cloud sees metadata only
Live todaySign-in and conversation threading, never agent I/O.
Browser-proxied local path
Reach it from your phone
RoadmapOpt-in outbound relay to reach your home brain remotely. Built only on request; on-machine is the default.
The verifiability claim is always one click from a way to check it — no account, no trust required.