Privacy & Local-First

This page explains the current product stance for privacy in CapsuFlow on iPhone.

It is a help-center page, not a legal privacy policy.

What Privacy Means In CapsuFlow

In CapsuFlow, privacy starts with how source material is handled.

The iPhone product is local-first. It is designed around capturing and keeping source material before any later step.

Raw Stays First

CapsuFlow treats raw source as primary.

That means the original material matters first. The app should be understood as preserving source material, not replacing it with a rewritten version by default.

Local-First By Default

CapsuFlow on iPhone should be understood as local-first by default.

When you capture and review material in the core app flow, the starting point is the material on your device and in the app’s current local workflow.

Source And Derived Output Stay Separate

CapsuFlow keeps source material and derived output conceptually separate.

Source is the original material you captured. Derived output is anything produced later from that source. They should not be treated as the same thing.

AI Is Downstream

AI is not the starting point of CapsuFlow.

In the product framing documented here, AI is downstream from source capture. The first job of the app is to help you capture, hold, and review source material.

What This Page Does Not Claim

This page does not describe legal terms, retention guarantees, or full account-level data policy.

It also does not claim more than the current manual can support. If a specific behavior depends on a particular screen, service, or export step, that behavior should be documented clearly in the relevant manual page.

Current Manual Scope

This page applies to the current iPhone version of CapsuFlow only.

It is meant to explain the product’s current privacy posture at a help-center level. It should be read together with the rest of the iPhone manual, not as a complete legal or technical specification.