Privacy & Security

Privacy isn't an afterthought—it's built into every layer of Lyaima. Your data stays local by default, and you're always in control.

Local-First Storage

Everything is stored locally in your browser's IndexedDB first. Your journals, events, milestones, and all data live on your device. Cloud sync only happens when you explicitly request it—never automatically.

  • All journal entries stored locally in browser IndexedDB
  • Events and milestones stored locally
  • Cloud sync is opt-in, not automatic
  • You control when and what gets synced
  • Data never leaves your device without your explicit action

Local AI Processing

Semantic search and pattern discovery run entirely on your device using local AI models. These features work completely offline with zero external requests. Your data never leaves your browser for these features.

  • Semantic search runs 100% locally on your device
  • Pattern discovery processes on your device
  • No internet connection required
  • No data sent to external servers
  • AI models downloaded once and cached locally

PII Filtering Before AI

When you choose to use cloud AI features (like AI chat), we first filter out all personally identifiable information (PII) locally on your device before anything is sent. Names become [PERSON_1], places become [LOCATION_1], phone numbers become [PHONE], and only the filtered summary is sent to external AI services.

  • PII filtering happens locally on your device first
  • Names automatically replaced with [PERSON_1], [PERSON_2], etc.
  • Locations replaced with [LOCATION_1], [LOCATION_2], etc.
  • Phone numbers, emails, addresses all filtered
  • Only privacy-filtered summaries sent to cloud AI
  • You can see exactly what's being sent before it goes

Transparent Controls

You have complete control over your data and privacy. See exactly what data is being used for AI queries. Enable or disable cloud AI features at any time. Your privacy settings give you full control over what leaves your device.

  • Privacy dashboard shows what data is synced
  • See PII filtering status in real-time
  • Review cloud AI usage history
  • Enable/disable cloud AI features anytime
  • Export all your data at any time
  • Clear local cache when needed

How Your Data Flows

1

You Write

Journal entries are saved immediately to your browser's local storage (IndexedDB).

Local Only
2

Local AI Processing

Semantic search and pattern discovery run entirely on your device. No data leaves your browser.

Local Only
3

Optional Cloud Sync

Only when you explicitly request it, your data syncs to cloud servers for backup and cross-device access.

Local + Cloud
4

Cloud AI (If Enabled)

If you use cloud AI features, PII is filtered locally first, then only filtered summaries are sent to external AI services.

Local Filtering → Cloud AI

We Do

  • Store your data locally in your browser
  • Process AI features locally on your device
  • Filter PII locally before sending to cloud AI
  • Give you complete control over cloud sync
  • Let you export all your data anytime
  • Work completely offline

We Don't

  • Automatically sync your data to cloud
  • Send your full journal entries to AI services
  • Access your data without your permission
  • Sell or share your data with third parties
  • Require internet for core features
  • Track you across the web

PII Filtering Example

Original Entry:

"Met John at Starbucks on Main Street for coffee. We discussed the project deadline. Called Sarah at 555-1234 to confirm the meeting."

After Local PII Filtering (sent to cloud AI):

"Met [PERSON_1] at [LOCATION_1] on [LOCATION_2] for coffee. We discussed the project deadline. Called [PERSON_2] at [PHONE] to confirm the meeting."

Personal information is removed locally on your device before any data is sent to external AI services.

Your Privacy, Your Control

Lyaima is designed with privacy at its core. Your data stays local by default. When you choose to use cloud features, PII filtering happens on your device first. You're always in control of what leaves your device and when.