Local-first policy: no telemetry/analytics/crash reporting, API keys in Keychain, data flow documented for every opt-in feature that touches personal data or talks to third-party AI providers. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
