‹ ADAM LOCAL
Privacy
Adam is an AI assistant, powered by Claude. When you talk
to Adam you are talking to an AI, not a person; your messages are processed by
Anthropic's Claude under your own account (details below).
The short version: Adam collects nothing. There is no Adam
server, no account, no telemetry, no analytics, no crash reporting. The maintainer
never sees your files, your conversations, your token, or your keys — there is no
infrastructure that could receive them. Everything runs on your own PC.
WHAT STAYS ON YOUR MACHINE
- Your files (the notes folder) — read locally; written only through
the review-and-approve flow, by the server on your PC.
- Your conversations — chat history and job records live in
data\state\ on your PC. Spoken audio is generated locally (the
Kokoro voice) or by your own device's built-in voice.
- Your secrets — the access token, settings, and any add-on keys. They
are never logged, never returned by the API, and never included in a release
or a diagnostics bundle (which is redacted before it leaves the app).
THE NETWORK CALLS ADAM ACTUALLY MAKES
Adam talks to the internet only in these ways — each one either goes to
your own account or is a plain software download:
- Anthropic (Claude) — your questions are processed by Claude using
your Claude account or your API key, under
Anthropic's privacy
policy. This is the one place your conversation content leaves your
machine, and it's the product working as advertised: you bring your own AI.
- Update check (GitHub) — the app asks GitHub's public releases
endpoint whether a newer version exists (a standard HTTPS request; no personal
data). One-click updates download from the same place. Turn it off with
update_check_enabled: false in settings.json.
- One-time installs — the setup wizard can download Python (via
winget) and Claude Code (from Anthropic); INSTALL-VOICE downloads the
open-source Kokoro voice model from its public GitHub releases. All are
ordinary downloads.
- Optional add-ons you configure — Calendar and Email bridges run
inside your Google account; LinkedIn and Twilio (SMS/voicemail) use
your API credentials. Nothing is proxied through anyone else. Add-ons
are off until you set them up.
- Optional phone access — over your Tailscale network (their
privacy policy); traffic
goes directly between your phone and your PC. If you enable Web Push
notifications, your browser's push service delivers them (the notification
payload is generated on your PC).
That's the complete list. If a future version ever adds a network call, it
will be documented here first.
YOUR RESPONSIBILITIES
Because everything is yours, privacy choices are yours too: what lives in your
notes folder, whether to enable add-ons, and who can reach your PC. Keep your
access token private (rotate it with ROTATE-TOKEN.cmd if it may have
leaked), and use the supported Tailscale path — not a public tunnel — for phone
access.