Privacy Policy - GyaniMed Local

Overview

GyaniMed Local (“the App”) is a desktop application developed by Swapnil Satish Khadke (“we”, “us”, “our”). This privacy policy explains how the App handles your data.

The core principle: GyaniMed Local processes everything locally on your device. No data is transmitted to external servers.

1. Data Collection

Data We Do Not Collect

• We do not collect personal information
• We do not collect usage analytics or telemetry
• We do not collect crash reports automatically
• We do not use cookies or tracking technologies
• We do not transmit any data to our servers or any third-party service

Data Stored Locally on Your Device

The App stores the following data exclusively on your Mac, in the application’s local data directory:

• Documents you upload (PDF, DOCX, XLSX files) - stored in a local uploads/ folder
• Knowledge graph data - stored in a local SQLite database (graph_nodes, graph_edges tables) with in-memory NetworkX graph
• Vector embeddings - stored in a local ChromaDB database
• Structured metadata - stored in a local SQLite database
• Conversation history - stored in the local SQLite database
• User credentials - password hashes (not plaintext) stored in the local SQLite database
• Audit trail - stored in the local SQLite database with SHA-256 hash chain integrity

2. Data Processing

All data processing occurs entirely on your device:

• AI/LLM Processing: Uses Ollama running locally (bundled sidecar or standalone). Language model inference runs on your Mac’s CPU/GPU. No queries are sent to cloud AI services.
• Document Processing: PDF parsing, text extraction, and entity recognition happen locally.
• Graph Database: Embedded SQLite tables with in-memory NetworkX graph, running within the application process.
• Vector Search: ChromaDB runs as an embedded database within the application.

3. Network Usage

The App uses network entitlements solely for localhost communication:

• The frontend (WebView) communicates with the bundled backend server on 127.0.0.1:8000
• The Ollama sidecar communicates with the backend on localhost:11434
• No external network connections are initiated by the App

The App does not connect to:

• Cloud AI services (OpenAI, Anthropic, Google, etc.)
• Analytics services
• Crash reporting services
• Advertising networks
• Any external API or server

4. Third-Party Services

GyaniMed Local does not integrate with any third-party cloud services. All dependencies run locally:

5. Data Security

• All data is stored locally and protected by your Mac’s filesystem permissions
• User passwords are hashed with salt before storage (never stored in plaintext)
• The audit trail uses SHA-256 hash chaining for tamper detection
• The App runs in the macOS App Sandbox with minimal entitlements
• Electronic signatures require password re-authentication

6. Data Retention and Deletion

• Your data, your control: All data is stored on your Mac. You can delete it at any time.
• Uninstalling the App removes the application binary. Local data in the data directory can be deleted manually.
• In-app data management: The Settings panel provides options to clear the vector database, graph database, SQLite database, or all data at once.

7. Children’s Privacy

The App is not directed at children under 13. It is a professional tool for pharmaceutical scientists and does not collect any personal information from any user, regardless of age.

8. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected in the “Last Updated” date above. Since no data is collected, policy changes will only relate to local data handling practices.

9. Contact

If you have questions about this privacy policy:

• Email: info@gyanimed.com
• Website: https://gyanimed.com/privacy

10. Apple App Store Privacy Labels

Based on the App’s behavior, the following Apple privacy nutrition labels apply:

Data Not Collected

GyaniMed Local does not collect any data. The app functions entirely offline using on-device processing.

Apple Privacy Label Selection: “Data Not Collected”