FounderOS is being designed around local-first AI: where a compatible local model is selected, inference should run on your own device rather than sending your prompts and files to a hosted AI provider.
Honest status: FounderOS is still a prototype. These are our design goals, not a claim that every privacy control has already been implemented or independently audited. Do not use this prototype for confidential or sensitive business data.
What we mean by local AI
In local mode, the selected model should process prompts and files on your computer. FounderOS should not send your prompt content, documents or conversation history to a remote AI inference provider as part of normal local inference. This must be verified in the released application and its network behaviour before we make it a guarantee.
Local processing is not the same as no network traffic
An online account, subscription validation, software updates, downloads, email verification, crash diagnostics or optional integrations may contact remote services. These functions must be disclosed clearly, limited to what is necessary, and designed so that optional diagnostics and integrations can be controlled where practical. We will document what each connection sends and why before commercial launch.
Your files and work
Our intended default is to keep business files, prompts, generated work and chat history on your device when local mode supports that workflow. Any optional sync, backup, hosted AI or third-party integration must be clearly identified before data is sent off-device. Do not assume that data is encrypted at rest or excluded from operating-system backups until the final implementation documents and verifies those protections.
Accounts and subscriptions
If you create an online account, we will need to process limited account and subscription information, such as an email address, authentication/session data and payment status. A payment provider may process billing information. Local AI inference does not mean the account and billing system is entirely offline or that no personal data is processed by service providers.
Choices and transparency
Local AI is the default product direction.
Hosted AI is a separate planned option and remains marked Coming Soon until it is implemented with clear consent and cost controls.
We aim to explain required connections, optional integrations, data categories and retention in plain language.
We will publish final privacy, retention, deletion and contact information before accepting real customers.
Before launch
We must test outbound network behaviour, review dependencies and logs, verify local storage and deletion behaviour, document third-party processors, and complete a security and privacy review. Until those checks are complete, FounderOS should be treated as a preview, not a certified privacy product.