What goes where
Operations Hub is built to keep your things on your computer. This page lists, part by part, what can leave it, where it goes, and what's kept.
Stays on your computer, always
| Part | Where its AI runs |
|---|---|
| Journal and its writing coach | Only the AI on your computer |
| Health and meals | Only the AI on your computer |
| Meetings and recordings | Only the AI on your computer |
| Camera captures | Only the AI on your computer |
| Study documents in classes marked private, and anything in Other | Only the AI on your computer |
| Your tasks, calendar, people and all your files | Stored only on your computer |
These rules are built into the app, not settings that can be switched off by mistake. A private part asked to use the cloud refuses.
Can leave your computer, when you choose
| What | Goes to | Kept? |
|---|---|---|
| The text of a study document, when you make a study set on a paid plan, from a class you've allowed | Our study service, then an AI provider | No. Our service keeps it in memory only while making the set. The provider is required to keep nothing. |
| Questions for cloud features you've switched on (for example, topic quizzes) | An AI provider | No, under the same rule |
| Your plan, its dates and how many sets you used this month | Our study service | Yes, to run your plan |
| Your name, email and payment details | Paddle, our reseller | Yes, by Paddle, for billing and tax law. We never see your card. |
The AI providers are reached through OpenRouter with zero-data-retention routing: a request is sent only to providers that don't store prompts or train on them, and fails rather than fall back to one that does. The full list is on who processes your data.
How it's protected
- Your hub can be locked with a password on your own computer. Passwords are stored as slow, salted hashes, never as text.
- Daily backups stay on your computer. On Pro, an encrypted copy can go to a cloud folder you choose; only your passphrase can open it.
- The study service holds no student text or questions, so there's nothing of yours to leak from it.
- Payment events are signed by Paddle and checked before anything changes.
- Our AI key never goes into the app. It stays on our server.
Your rights
Export everything at any time from Settings, then Your data. To delete what our study service holds about your plan, write to support@duncandoit.com from your purchase email. Paddle keeps billing records as tax law requires.
Report a security problem
Write to support@duncandoit.com with the subject "Security". Please give us a reasonable time to fix it before sharing it publicly. Our security.txt lists the same address.