Your apps and data

Local by default does not mean always offline

Your apps and their working data live on this computer by default. You use the generated app inside Zymorph rather than signing in to a separate Zymorph website.

Some actions still leave the device:

• Creating or changing an app sends your request and relevant working context to the selected model provider.
• An app that uses an external account sends approved operations and data to that service.
• An app may use ordinary internet access when its behavior needs it.

An app that relies only on local information can often keep working offline after it has been created. Creating, changing, or using external services usually needs an internet connection.

Four types of access

Model provider

The model helps Zymorph understand requests and work on the app. It is selected in the composer. Provider plans, retention, privacy, and charges are controlled by that provider.

Connected account

A generated app may request specific work with an account such as Google Drive. You review and grant that app separately. The app does not receive the account credential itself.

Private app value

Some services use an API key or another private value instead of browser sign-in. Enter it in the trusted Settings field requested by the app—never in chat.

Folder access

A local folder is unavailable until you explicitly add it to the current app. Read-only and read + write are different grants.

What is not copied into app source

Model-provider credentials, connected-account credentials, and private app values are kept outside generated app source. This matters because the app’s source can change and can be captured as source history.

Do not add secrets to a request, screenshot, notes field, or sample data. If a key appears in chat or a screenshot, treat it as exposed and rotate it with the service that issued it.

Recovery boundaries

A complete Recovery point returns app source and durable app data to the selected moment. Current conversations and current folder/account permissions stay current.

Source versions are narrower: they return source only and do not return durable app data.

See Recovery and source versions before relying on either one.

Deletion

Moving an app to Trash keeps it available for restoration. Permanent deletion is available only after the app is in Trash and cannot be undone.

Deleting an app does not remove a saved external account from this device. To remove that account and invalidate app grants that depend on it, use Disconnect under Settings → Connections.

Practical privacy habits

• Use fictional or minimal sample information while testing a new app.
• Choose the smallest useful folder and prefer read-only access.
• Review the operations shown before connecting an account.
• Keep API keys out of chat and screenshots.
• Check the selected model before sending sensitive context.
• Create a Recovery point before a large experiment.

Sharing and synchronization are not covered here while that product flow is being finalized.