Why local-first

The privacy stance is deliberate, and it shapes the whole product:

• Local-first by default.
• No login required for the core manual timeline.
• Export available.
• No AI features in local-only mode, because AI requires sending data out.
• Login and cloud mode are opt-in for sync and AI features.
• The platform does not actively sell data or train models on it.

Users should assume cloud AI involves real privacy tradeoffs, including provider and API retention policies that may not be fully controlled by the app.

Open sourcing is on the roadmap, but not the first priority unless users strongly request it.