On your device
- Projects, chats, notes, files and decisions
- Items marked Private
- API keys—in the Apple Keychain
- Backups—wherever you saved them
Security
APTAKE has no account and no servers of its own. When you use a cloud AI, the provider you chose receives only what you allowed. After a request is sent, that provider’s own policy applies.
Where things go
Over HTTPS, from your device, when you send a request.
The request goes to an Ollama or LM Studio server on your Mac or on a computer on your network, not to a cloud provider. If the connection is not encrypted (HTTP), the app shows a warning. Don’t expose your local server to the public internet.
On the device
On iPhone and iPad, Apple Data Protection encrypts the app’s files when a passcode is set. On Mac, turn on FileVault.
Face ID, Touch ID or the device passcode.
API keys are stored in the Apple Keychain and are left out of APTAKE backups and exports.
Items marked Private are not included in AI requests. Before you send, you can see this in the Context Inspector.
Limits
After data is sent to an AI provider, that provider’s policy applies. Backups in iCloud Drive and app data in your iCloud device backup are protected by your Apple Account. With Advanced Data Protection turned on, they are end-to-end encrypted. On Mac, turn on FileVault.
Write to hello@enverown.com with “Security” in the subject line.
Short answers are on the FAQ page. Anything else, write to us.