Tholi
SECURITY

Security and data

Work state stays local by default; external connections happen when you visit a site or actively use remote AI.

LOCAL BY DEFAULT

Work state stays local; actions may connect outward.

Stored by default onYour deviceLayouts · sessions · notes · history
When visitingTarget websites
When requestedYour AI service

Workspace state is stored locally by default. Local storage does not mean fully offline: websites, release checks, and remote AI still use the network when triggered.

SEPARATION AND PROTECTION

Sessions and credentials have separate boundaries.

Website sessions

Separated by use space

Each use space keeps its own cookies, site storage, and sign-ins.

AI credentials

Protected by local secure storage

Saved API keys use operating-system encryption; the interface reads only the minimum status it needs.

YOUR DECISION

Choose what to open, send, and clear.

  • Open or drop only the local files needed for this task.
  • Selected text and questions leave the device only when you actively call AI.
  • Clear cookies, site data, cache, and history by use space.
  • Get installers from the source linked on the download page and review the unsigned warning.

Retention, training, and deletion by remote AI providers follow their policies. Review the selected endpoint before using sensitive material.

Read the privacy information →