Built around the owner
The durable copy lives on your Mac.
OAuth tokens stay in macOS Keychain. Imported records and the decision ledger are stored in an encrypted local database. Optional phone syncing sends encrypted envelopes that the relay cannot read.