LAILALOCAL AI LAB

Technical privacy audit

Clear answers.
Before promises.

This is an implementation audit, not a legal Privacy Policy. It separates verified behavior from work that must be reviewed before publication.

01

Project and code data

Verified

LAILA reads a user-chosen workspace, limits project search and inspection, and constrains approved writes to source files. Changes require approval and create a local snapshot first.

Evidence: packages/workspace/src/index.ts · README.md

02

Settings and state

Verified

Workspace history, model choices, mode, workflow settings and skill permission state are written through the desktop application’s local settings store.

Evidence: apps/desktop/electron/main/settings-service.ts · apps/desktop/electron/main/main.ts

03

Local model communication

Verified

The active production provider communicates with Ollama on the local machine. Core chat supports health checks, model discovery, streamed responses and cancellation.

Evidence: packages/model-provider/src/index.ts · apps/desktop/electron/main/local-ai-service.ts

04

Cloud model communication

Not yet implemented

Cloud catalog entries are disabled in the release candidate. No supported cloud execution path is enabled yet; consent, payload boundaries and provider terms must be reviewed before Public MVP release.

Evidence: packages/ai-core/src/catalog.ts

05

Outbound connections

Needs human review

Ollama model installation and optional Pixabay image search can make external requests. The complete production allow-list, request contents and third-party terms require review.

Evidence: apps/desktop/electron/main/local-model-manager.ts · apps/desktop/electron/main/curated-image-service.ts

06

Telemetry

Verified

The desktop’s first-build dogfood ledger is bounded and stored locally. The public website separately uses optional cookieless Cloudflare Web Analytics and aggregate download counters when configured.

Evidence: apps/desktop/electron/main/first-build-dogfood-telemetry.ts · src/routes/__root.tsx · src/routes/download.mac.ts

07

Crash and error reporting

Unknown

No third-party desktop crash reporter was identified in the audited paths, but a release-wide review must confirm that all production error paths and dependencies remain local.

Evidence: apps/desktop/package.json · apps/desktop/electron/main/error-capture.ts

08

Updates and downloads

Needs human review

The website download route resolves signed release metadata, records aggregate attribution and streams the DMG from Cloudflare storage. Desktop update behavior is not finalized for policy publication.

Evidence: src/routes/download.mac.ts · src/routes/api.releases.latest.ts · migrations/0001_init.sql

09

Skills and external services

Not yet implemented

Document ingestion, permission and retention foundations exist, but specialist document execution is explicitly unavailable. Speech and language packs are planning work, not current product behavior.

Evidence: packages/ai-core/src/skills.ts · apps/desktop/electron/main/skill-permission-service.ts

10

Files, imports and deletion

Needs human review

Session attachments can optionally be retained on-device; original in-memory byte buffers are cleared after retention work. Snapshot, retained-attachment and exported-project deletion behavior needs end-to-end release verification.

Evidence: apps/desktop/electron/main/attachment-retention-controller.ts · packages/workspace/src/index.ts

11

Logs and temporary files

Needs human review

Build and preview logs are shown in the application, and bounded local diagnostic records exist. Storage locations, retention periods, temporary extraction files and deletion guarantees require a release review.

Evidence: apps/desktop/electron/main/first-build-dogfood-telemetry.ts · packages/workspace/src/index.ts

Full Privacy Policy

Written after the facts are known.

Human review must confirm every unresolved data flow, provider term, retention period and deletion guarantee. The final legal Privacy Policy will be written separately after that review.

Not a legal policy