Privacy

Reflex is local-first: it runs on your computer, and your data stays there unless a task you asked for needs the internet.

What stays on your computer

• AI: Qwen3-0.6B and Qwen3-4B run locally through llama.cpp. Your requests, screens and decisions are processed on your device.
• Voice: speech recognition (Whisper) and spoken replies run on your device. No audio is uploaded.
• What Reflex sees: app interfaces and web page structure are read only during a task, used for the next decision, and not stored.
• Skills and history: saved locally (~/Library/Application Support/Reflex on macOS). Skills store the steps, never the values you typed or anything secret.
• Audit log: a tamper-evident local log of every action and permission decision, for you to review in Settings → Privacy & audit.

When the internet is used

• When the task itself is on the internet — opening a website, searching the web.
• Once, to download Qwen3-4B if you choose to (or you can import the file).
• To check for updates from the official releases.
• Cloud reasoning (Pro, off by default): only if you turn it on and add your own Anthropic API key. Then, for hard steps, the current screen description and your request are sent to the model you chose, within the spend limit you set. Passwords and secret fields are never included.

What Reflex never does

• It never uploads screenshots, documents, browsing data or conversations without an explicit setting you turned on.
• It never reads, types, speaks, logs or stores passwords and secrets. If you dictate one, it is removed before anything else sees it.
• It never follows instructions written inside web pages or documents — only yours.
• It has no analytics or advertising trackers.

Deleting your data

Settings → Skills lets you delete skills; Settings → Privacy & audit controls how long logs are kept. To remove everything, quit Reflex and delete its data folder (see Installation → Uninstall).