Keys are stored only as SHA-256 hashes, the client does not hold third-party keys, and audio content is not stored. Transcription runs on your device by default, while answer generation still goes through the gateway; screen sharing and account downloads are described within their own boundaries.
On Apple silicon, transcription is local by default and can be switched to the cloud fast or standard mode; when the local engine is unavailable it falls back to the cloud automatically. Audio content is not stored.
Only when an answer has to be generated do the current question and the context you enabled enter the answer path. Audio content is not stored, and usage records only bytes and duration; keys for third-party models are configured only on the server and are not kept by the client.
Screen reading can be turned off on its own, and once it is off the screen content is no longer an input. Whether the shared picture shows the overlay depends on macOS, the meeting app and the share source; in supported setups the overlay can stay out of shared content, so verify with the way you will really share before relying on it.
Each client key is stored only as a SHA-256 hash, not in plain text, and is bound to your device. Client requests carry a device signature; the customer center keeps the current device and the rebind action, and shows cooldowns and limits as they are.
You can download only after signing in to the customer center. The link is a signed link valid for 5 minutes, and carries a user watermark where it can be applied, to help trace its origin. The public site offers no anonymous direct links.
Enters transcription according to your audio source settings.
Screen, session and personal knowledge take part only when the matching feature is enabled.
Handled through the gateway when an answer has to be generated.
Authentication, device state and the 5-minute signed download are managed by the customer center, with a traceable watermark where it can be applied.
Lumina