Skip to content
Public AAC

What leaves your device

The short answer: nothing, unless you opt in — and then only ciphertext.

Everything the app needs to speak — boards, voices, recordings, settings — lives on the device. With no account and no internet, everything works, forever. That’s not a degraded mode; it’s the design.

If you do sign in and sync a person’s boards:

  • Boards and settings sync as end-to-end encrypted data. The server stores them but cannot read them — not the board contents, not even the board names.
  • Voice recordings sync only behind a separate per-person opt-in that is off by default, with the same end-to-end encryption. Opt-in off means zero voice bytes leave the device.
  • Synthetic voice models never sync at all. Neural voices are downloaded to each device directly.

What the server does know: your sign-in email (or passkey), and that an account has some number of profiles and devices — the minimum needed to route encrypted data between your own devices.