This page is a reference translation provided for convenience only; the Traditional Chinese version is legally binding.
This Privacy Policy explains, in plain language, three things: what data Armor EdgeAI (the "Software") handles, why it handles it, and where that data goes. Our design principle is simple — your things stay on your own computer as much as possible.
Before we start, keep one key point in mind: the content you import into or create with the Software (your photos, documents, conversations, audio, transcripts, translations and generated images) stays on your computer by default and is never sent out automatically. The sections below explain where each category of data goes.
Our Core Principles (Data Stays on Your Computer)
- Local first: The Software runs AI tools directly on your computer. Your content is, by default, stored and processed only on your own machine — we cannot see it, and we do not send it anywhere in the background.
- The few automatic connections never include your personal content: The Software makes a small number of connections automatically in the background, but none of them transmit your personal content: (a) License verification — confirming that this computer's license is valid; in the process, hardware identifiers such as this computer's serial number are sent (production builds perform this automatically; see below); (b) Software updates and model downloads — checking whether a new version is available and fetching updates or model files from our download service; these are plain queries and downloads and never upload your content.
- We collect no usage statistics: The Software does not collect or transmit any usage statistics, telemetry or heartbeat data in the background.
- Every other outbound connection is your decision: Actions such as reporting a problem to us, entering a serial number to activate your license, or downloading a specific model or optional component on demand happen only when you press the button — never on their own. Letting other devices or AI agent programs connect to the Software (LAN mode, AI Agent Connections) is also off by default and turned on only by you.
- We do not send your content to cloud AI: The Software never sends your conversations, photos, documents, audio, transcripts or translations to any external AI service in the background, and never uses this content of yours to train AI; we maintain this principle through reasonable technical and process controls (see "AI and Your Content").
What Data We Handle, and Why
Below, the data the Software touches is grouped into everyday categories. For each one we tell you what it is, why it is needed, and where it goes.
- Your content (your photos, documents, conversations, audio, transcripts, translations and generated images)
- What it is: everything you import into or create with the Software — conversation history, photos and the album information organized from them, scanned or recognized documents, transcripts produced from audio and Live transcription recordings, translated content and the terms you have used, and the images you generate.
- Why: this is what the Software works on for you; the AI tools need it to function.
- Where it goes: it stays on your computer. All processing happens locally; nothing is uploaded automatically.
- Hardware identifiers of your device (such as model and serial number)
- What it is: this computer's manufacturer, serial number, model, and a device identifier computed from hardware information and used to recognize this machine.
- Why: to confirm whether this computer is licensed to use the Software. It contains none of your personal content.
- Where it goes: production builds periodically send this computer's serial number to our licensing service and retrieve only this computer's own license status; the licensed-device-model list is downloaded to your computer and compared there, and your model is not uploaded. When you enter a serial number to activate your license, or when the Software automatically recovers this computer's earlier license binding, the device identifier is sent along as well. See "What Data Leaves Your Computer, and Why".
- Photo capture locations
- What it is: some photos record where they were taken (GPS coordinates); the Software reads this while organizing your albums.
- Why: to help you organize and revisit photos by place.
- Where it goes: it stays on your computer. An album's "places" are looked up locally on your computer by matching the photo's coordinates against offline place-name data built into the Software (Natural Earth, public-domain data); coordinates are not uploaded, nothing goes online, and no online map is used. The coordinates and the corresponding places exist only in your local album information.
- Face-grouping data
- What it is: when you use the people-organizing feature for photos, the Software analyzes faces in your photos and groups the same person together; you may also name them.
- Why: so you can browse and organize your own photos by person.
- Where it goes: it stays on your computer. All face-related data exists only locally and never leaves your device; this feature is for organizing your personal photos only and must not be used for unauthorized facial-recognition surveillance or any other use that infringes on others.
- Data you provide when you actively report a problem
- What it is: the problem description you write in the "Report a Problem" feature, an optional contact email, optional screenshots or attachments, and optional diagnostic logs.
- Why: so our support staff can understand and help resolve the situation you encountered.
- Where it goes: it is sent to our support team when you press Submit. See "What Data Leaves Your Computer, and Why".
- Your preferences
- What it is: your software preferences and consent state.
- Why: to remember your settings so the Software behaves the way you like next time.
- Where it goes: it stays on your computer. It is not sent to us.
What Data Stays on Your Computer
All of the following is stored and processed only on your own computer and is never sent out automatically:
- Your conversation history, and the conversations in "Recently deleted".
- Your photos, the album information organized from them, AI descriptions and tags, and photo capture locations.
- Your face-grouping data.
- The documents you scan or recognize and their recognition results.
- Your audio files, transcripts and organized highlights, as well as Live transcription recordings and transcripts.
- Your translated content, the terms you have used, and your translation history.
- The images you generate.
- Your preferences and consent state.
- The local search index, Library pins and tags, API usage statistics and AI agent call records (explained in the next section).
- The API keys and AI agent connections you create; the Software keeps only the hash values used to verify them, not the keys or credentials themselves.
This data is kept together in one folder on your computer; you can move the whole folder to another drive in Settings. During a move we keep your data safe — even if the move fails midway, your original data remains intact. This local data is currently stored unencrypted; we recommend protecting it further with operating-system-level disk encryption (for example Windows BitLocker).
Records, Indexes and Backups on Your Computer (All on Your Computer Only)
The data mentioned in this section exists only on your own computer: it is never uploaded, and neither the Company nor any third party keeps or can obtain it; the items differ only in how long they stay on your computer.
- Deleted conversations and daily automatic backups: a conversation you delete first moves to "Recently deleted" and stays on your computer for 30 days; you can restore it during that time, and it is cleared automatically afterwards. You can also delete a conversation permanently in "Recently deleted", or use "Clear all"; a permanently deleted conversation is removed from the Software and cannot be restored. To guard against accidental loss, the Software automatically makes a backup of your conversations and settings on your computer every day, and your computer keeps only the 7 most recent; older ones are deleted automatically. A deleted conversation may therefore remain in the most recent few backups until they are replaced by newer backups. When you run "Clear my data", your conversations are cleared immediately and these backups are deleted as well.
- Protection backups before upgrades and imports: before upgrading the data format or re-importing data from an earlier version, the Software first leaves a protection backup of the data as it was at that time on your computer (at most the 3 most recent per category), so it can be restored if something goes wrong; old data replaced during an import or restore is also first moved aside and kept. These backups and the data moved aside stay on your computer until they are replaced by newer backups, you handle them in "Settings → Storage and data", or you run "Clear my data".
- API usage statistics: when a program (another program on your computer, or another device that connects after you turn on LAN mode) calls a model through the Software's API, the Software records daily statistics on your computer: the caller (the Software itself, a program on this computer that uses no key, or one of the API keys you created), the interface and model used, the number of requests, the number of errors, input and output token counts, total response time, and the number of times requests were trimmed or rejected for exceeding the context length. The content of requests and responses is never recorded. You can view these statistics under "API Configuration"; by default they stay on your computer for 90 days, and older records are deleted automatically; you can change this to 180 days, 365 days or keep them indefinitely under "API Configuration". Running "Clear my data" clears these statistics as well (the API keys themselves are not cleared; revoke them yourself under "API Configuration").
- Local search index: so that you can run full-text search in the "Library", the Software keeps, separately on your computer, an index of the titles and text of your conversations, document recognition results, transcripts, translations and generated-image prompts, together with album names and tags. It is deleted together with everything else when you run "Clear my data".
- Library pins and tags: the pins and tags you add to items in the "Library" are text you typed yourself; they exist only in the database file on your computer and are never sent and never written to log files. They are cleared module by module when you run "Clear my data", and are included in the daily backups the Software makes on your computer and in the backups you export yourself.
- Live transcription (Beta): Live transcription recordings and transcripts are processed and stored only on your computer: they are never uploaded, and neither the Company nor any third party keeps or can obtain them. Live captions are produced by a speech recognition component running on your computer, which connects only to this computer. The first time you use live captions, the Software downloads the speech recognition model file from our download service (the download contains none of your data; for the download source see item 3 of "What Data Leaves Your Computer, and Why"). If you choose "Text only", the recording is kept on your computer only temporarily and is deleted automatically once the text is done; if the transcription is not completed (for example, it fails), the recording is kept until the transcription is completed or you delete it; if you choose to keep the recording, the recording and transcript stay on your computer until you delete that session from the transcript list or run "Clear my data".
- AI agent call records: if you use "AI Agent Connections", the Software records on your computer the tool name, time, success or failure, and the address of the device that made each call (not the content of files or results), keeping at most the 5,000 most recent records; older ones are deleted automatically. You can clear these records in "AI Agent Connections", and running "Clear my data" deletes them as well.
What Data Leaves Your Computer, and Why
Of the items below, item 1 ("License verification") and item 2 ("Downloads and updates") happen automatically in the background (but never include your personal content); items 3 to 6 happen only when you actively trigger them.
- License verification (to confirm you are entitled to use the Software)
- What is transmitted: at launch, and about once an hour thereafter, production builds send this computer's serial number to our licensing service and retrieve only this computer's own license status (whether it is on the license list, and the expiry date); if the licensing service temporarily does not support this kind of query, the Software instead downloads the entire license list and compares it on your computer. The licensed-device-model list is downloaded in full to your computer and compared there; your model is not uploaded. In addition, if this computer currently needs a serial number to be entered, the Software first automatically sends this computer's serial number, together with a device identifier computed from hardware information, at launch to check whether this computer has previously redeemed a serial number (for example after a reinstall); if so, the original license binding is restored directly and you do not need to enter the serial number again. None of the above contains any of your personal content.
- Why: to confirm this computer is licensed — a precondition for using the Software.
- When: production builds perform this verification automatically; there is no option to turn it off. The result of the last successful online verification is stored encrypted on your computer; if you are temporarily unable to connect afterwards, you can keep using the Software for up to 3 days, after which you need to reconnect to verify again.
- Downloading AI models and software updates
- What is transmitted: the installer does not include AI models; when needed, the Software fetches models, computing components and software updates from our download service; while the Software's window is open, it also periodically (about every 30 minutes) asks our download service whether a new version is available. These are all plain queries and downloads and upload none of your content. The actual download source is as shown in the Software's interface; we may obtain models from their official sources or licensed mirrors and mirror them to our download service. For the exceptional sources of a few optional components, see item 3.
- Why: so you do not have to install huge models up front — download only what you need — and so you know when a new version is available to update to.
- When: on first launch, when you use a related feature, or when the Software checks for updates.
- Optional components you actively download (speaker identification and live captions)
- What is transmitted: "Speaker identification" in the Speech Workshop and the live captions of "Live transcription (Beta)" require separately downloaded components. Two of them are models published by NVIDIA (Nemotron-3-Diarization, about 107 MB, used for speaker identification; nemotron-3.5-asr-streaming-0.6b, about 742 MB, used for live captions), which the Software fetches only from our download service. The speech recognition engine they share (about 20 MB) is also provided by our download service; when our download service does not yet provide it, it is instead fetched directly from the release published by NVIDIA on GitHub (github.com and release-assets.githubusercontent.com). These are all plain downloads and upload none of your content; the Software checks the downloaded files against a version, file size and hash value fixed in advance and discards them if they do not match.
- Why: these two features are optional, so only people who need them download them.
- When: the Software connects only when you actively press Download in the Speech Workshop; AI agent connections do not trigger these downloads; the offline PoC build does not perform these downloads. As with any network connection, GitHub and its content-delivery networks can see basic connection information such as the connecting IP address, and handle it under their own policies.
- You actively enter a serial number to activate your license (serial redemption)
- What is transmitted: the software serial number you enter, together with this computer's serial number and a device identifier computed from hardware information; none of your personal content.
- Why: to confirm the serial number is genuine, prevent misuse, and bind the license to this computer.
- When: only when you actively enter a serial number and submit it; after binding, day-to-day license verification returns to the method in item 1.
- You actively report a problem
- What is transmitted: the problem description you write in "Report a Problem", the optional contact email, optional attachments, and optional diagnostic logs. To help with diagnosis, each report also includes a small set of basic information about this computer (such as serial number, model, basic specifications, software version, and the data storage location and remaining free space). If you choose to attach diagnostic logs, we automatically redact sensitive information in them (such as personal folder paths, email addresses, passwords and similar) before upload.
- Why: so support can locate and resolve your issue.
- When: only when you press Submit; if you do not submit, nothing is sent. Note: the accompanying basic device information (including the serial number) is transmitted only when you actively submit a report, so that we can identify which machine it is.
- Exporting a diagnostics file
- What is transmitted: you can export diagnostic information as a file.
- Where it goes: only to a file on your computer; the Software does not upload it automatically. Whether to give it to us is entirely your decision.
Service Providers We Work With
In the specific situations above we use the following service providers; each processes data under its own privacy policy, and we hand over only the corresponding data within the scope necessary to achieve the purpose. Depending on your distribution channel and the features you use, the providers actually involved may differ.
- Cloudflare (control plane): used for handling support reports, and for license status queries and software serial / license verification (implemented with Cloudflare Workers plus database and object-storage services). The data it touches is exactly the scope described above — not your conversations, photos, transcripts or translations.
- Cloudflare (content delivery network, CDN): used to deliver AI models, computing components and software updates for you to download, and to answer new-version checks. It handles download and query requests only — none of your personal content.
- Payment and distribution service providers (depending on future paid or reseller channels): if you obtain the Software through a paid channel or reseller, the related payment processing, orders and license issuance may involve payment, distribution or channel service providers; they process only the data necessary to complete the transaction and licensing.
- Support and communication service providers (depending on the support system used): handling support tickets, forms or email correspondence may involve the corresponding support, form or email system providers; they process only the data necessary to provide support.
We review providers' data-protection capabilities as necessary and share data only within the necessary scope; the named list of providers actually used will be updated and disclosed in this policy or in the application when the related features go live. Please also note: GitHub, a download source of the optional component mentioned above, is the public publication source of that component, not a service provider commissioned by the Company to process your data; when you download, the Software connects to it directly, and the Company does not hand over any of your data to it.
Local AI Service and LAN Mode
The Software itself is a local AI inference service running on your computer — the AI tools run directly on your machine, with no need to connect to any external or cloud AI.
- By default, for this computer only: by default, the AI service the Software provides is available only on your machine, and your content does not leave this computer.
- "LAN mode" opens the local AI service to your local network: this option is off by default; while off, the service interface binds only to your machine (localhost). After you enable it in Settings, the service interface is provided on this computer's local-network address as well, so other devices on your local network (for example another computer) can connect and use it; the interface shows the address for reference. Once it is enabled, other devices on your local network must present an API key to use this interface (you create and revoke keys under "API Configuration" in the Software); connections without a key are refused; connections from this computer itself do not need a key. An API key is equivalent to a usage credential: anyone who obtains the key and can reach your local network can use the AI services and computing resources on your computer, so keep it safe and revoke it immediately if it leaks. Connections on the local network are not encrypted; other people on the same network may be able to see the keys and content sent over those connections. If you additionally turn on "Share by name (mDNS)", the Software broadcasts a connection name (for example Armor-EdgeAI-xxxxx.local) and this computer's local-network address on your local network so that other devices can find it; broadcasting stops once you turn off LAN mode or this option. Enable these options only on networks you trust, and manage your firewall, router and access permissions yourself; do not expose the local AI service to the public internet. Whether this option is on or off, requests and responses flow only within your device and your local network, and the Software never sends your content to the Company or to any cloud. After you turn off LAN mode, the Software no longer accepts connections from the local network.
- We do not send your content to external AI: whether this mode is on or off, the Software never sends your conversations, photos, documents, audio, transcripts or translations to any external or cloud AI service.
- API QR Code (Beta): the "API QR Code" page can generate a QR code that apps on your local network supporting the OpenAI-compatible API can scan to use this computer's models. Each time one is generated, a new API key is created, and the QR code contains the full content of that key, together with this computer's name, local-network address and port. Do not photograph or share this QR code; if it leaks by accident, revoke the corresponding device or key on that page or under "API Configuration". Connections set up through the QR code are, like other local-network connections, unencrypted; use them only on networks you trust.
AI Agent Connections (MCP)
- What it is: the Software offers an optional feature, off by default, that you must turn on manually in "Settings → AI Agent Connections", which lets AI agent programs (for example third-party tools such as Claude Code or Cursor) call the Software's text recognition (including structured extraction) and speech-to-text functions. Every connection needs its own credential that you create, and you can revoke it at any time; the Software keeps only the credential's hash value. Calls from an agent never trigger the download of any model or component.
- Only local connections by default: by default this feature accepts only connections from this computer itself. Agents on other computers on your local network can connect only when all three of the following hold at the same time: (a) you have turned on LAN mode; (b) you have turned on "Also allow AI agents on the LAN" in "AI Agent Connections"; (c) "Allow from the LAN" is checked for that connection. Agents connecting from the local network can only send file content directly; they cannot specify file paths on your computer. Local-network connections use unencrypted HTTP, and people on the same network may be able to read the connection credential and the content; use this only on networks you trust, and revoke the connection when you no longer need it.
- Data handed to third-party agents: once you hand a file or content to a third-party agent, or that agent obtains a recognition or transcription result, how that data is handled, and whether it is sent to the agent's own cloud service, is governed by the policies of that agent program and its provider and is outside the control of the Software and the Company; the Software's "your data stays on your computer" commitment covers only the part the Software itself performs.
- Records kept locally: the Software keeps only the connection list and call records on your computer (see item 7 of "Records, Indexes and Backups on Your Computer"; not the content of files or results); they are deleted when you run "Clear my data", and agents then need to reconnect.
AI and Your Content (Training)
- Your content is not used to train AI: we do not use your local content (your photos, documents, conversations, audio, transcripts, translations or generated images) to train or improve any AI model. The models the Software uses are fully trained before download and perform inference only, on your computer.
- Any future change requires your consent first: if we ever plan to train or improve AI using user content, we will clearly inform you in advance and proceed only after obtaining your explicit consent; you can always refuse.
Your Choices and Rights
- Clear my data: in "Settings → Privacy & Data" you can clear, in one step, the data the Software has produced and kept for you, covering: AI descriptions of photos, people/semantic organization data, thumbnails and capture-location information; document recognition results, along with the file copies and page previews the Software kept for documents; translation jobs and history; transcripts and highlights of audio, Live transcription recordings and transcripts, along with the audio copies the Software kept; your conversation history and the reading index of documents attached in conversations; your generated images; the local search index and Library pins and tags; AI agent connections and call records; API usage statistics; and the backup copies of this data on your computer (daily automatic backups, protection backups made before upgrading the data format and before re-importing, old data moved aside during an import or restore, and backups left behind when an earlier settings file was corrupted). When clearing, the Software also tidies up its database files so that deleted content does not remain in the files' free space. Original files in your own folders are not affected — the Software clears only the data and copies it kept itself; and even if one item fails to clear, the others are unaffected. Note: clearing cannot be undone; if you want to keep conversation history or generated images, export or back them up first.
- The scope and limits of one-step clearing (stated honestly): memory cards are generated on the spot when you view or save them, and the Software does not separately keep card image files; images you save to your own folders are your files and are not affected. One-step clearing currently does not cover: your preferences and consent state, the chat roles you have customized, the API keys you created (keys are connection credentials; revoke them yourself under "API Configuration"), the Software's diagnostic run logs, and folders left behind by earlier versions (0.x) (delete these separately via the "Old-version (0.x) data" card in "Settings → Storage and data"). Backup files and diagnostic files you export yourself are stored in locations you choose and are also outside the scope of clearing. To remove these completely, you need to reset preferences, revoke keys, delete the old-version data, or uninstall. We state this limitation openly so you will not assume everything was cleared.
- Manage storage location: you can see how much space each category uses and move the whole data folder to another drive.
- Exported backups (backup files are unencrypted): the backup you export yourself in "Settings → Storage and data" is an unencrypted compressed archive containing your conversations, album information, document recognition results, transcripts, translation and generated-image records, your preferences, and the related files the Software stores on your computer for this content. This file exists only in the location you choose (your computer or your own storage device); the Software does not upload it, and the Company keeps no copy; how long it is kept and where is entirely up to you. Anyone who obtains this file can read its contents, so keep it as you would a personal document; we recommend storing it on an encrypted disk or folder. API keys, API usage statistics and AI agent connections are not included in the backup.
- Your legal rights, and the nature of local data: under the Personal Data Protection Act of the Republic of China (Taiwan) and other applicable data-protection laws, you have the rights to inquire about, review, obtain copies of, supplement or correct, cease the processing or use of, and delete your personal data. The Software is currently offered in Taiwan only; if it is offered in other regions in the future, your rights will be protected equally within the scope of the laws applicable there. Note that we cannot access or delete the local data on your computer on your behalf — you manage that data yourself via "Clear my data", by deleting folders, or by uninstalling. For the small amount of data that has been sent to us or our providers (support reports, license/serial data), you may exercise the rights above by writing to service@genius-gh.com. To protect your data we may need to verify your identity first; we will respond within a reasonable period after receiving a request (in principle within 30 days) and, where technically feasible, provide a portable file format. If you believe our processing does not comply with applicable law, you may also lodge a complaint with the competent authority where you are located.
- Uninstall: you can uninstall the Software at any time. Note that the contents of the data folder on your computer may need to be removed separately as described in item 2.
Data Retention and Deletion
- Data on your computer: it is only on your computer, is never uploaded, and the Company keeps no copy of any of it; it is kept until you delete it yourself or uninstall, and only the following items are deleted automatically on your computer according to set periods: conversations in "Recently deleted" after 30 days; daily automatic backups, of which only the 7 most recent are kept; protection backups before upgrades and imports, of which at most the 3 most recent per category are kept; API usage statistics after 90 days by default (adjustable under "API Configuration"); AI agent call records, of which at most the 5,000 most recent are kept; and Live transcription recordings for which "Text only" was chosen, deleted once the text is done (kept if the transcription is not completed, until it is completed or you delete it). See "Records, Indexes and Backups on Your Computer" for details. Running "Clear my data" does not affect the original files you imported.
- Data sent to us or our providers: retained within the scope necessary to achieve the stated purposes, subject to the following periods:
- License/serial and security-related records: about 24 months;
- Support tickets and correspondence: about 3 years;
- Download/CDN request logs: about 12 months;
- Backup data: about 90 days.
We may adjust these periods within the necessary scope in response to applicable law and actual systems.
- You may at any time request deletion of your personal data as described in "Your Choices and Rights".
Minors and Sensitive Data
- Age of use: the Software is intended for users who are at least 18 years old or have obtained the consent of a legal representative.
- Face data: photo face-grouping data stays entirely on your computer and never leaves your device; this feature is for organizing your personal photos only and must not be used for unauthorized facial-recognition surveillance or other uses that infringe on others' rights.
- Location data: photo capture locations are extracted from the photos themselves, and places are obtained by a lookup on your computer, without going online or using an online map; the coordinates and places exist only in your local album information and never leave your device.
- Recordings: Live transcription may record other people's voices. It is your own responsibility to obtain the consent of all participants before recording and to comply with the regulations of your region (see the End User License Agreement for details); recordings and transcripts stay only on your computer.
Cross-Border Transfers
The small amount of data that is sent to us or our providers as described above (support reports, license/serial data), and the model downloads you actively trigger (which only fetch files and upload none of your content), may be transferred to and stored in regions outside our country (for example the global data centers of our provider Cloudflare). We take the legalization and safeguard measures required by the Personal Data Protection Act of the Republic of China (Taiwan) and other applicable laws — for example signing data processing agreements (DPAs) with providers and conducting necessary data-protection reviews of them; where the laws of a given region apply, we adopt the cross-border transfer mechanisms those laws require (for example Standard Contractual Clauses, SCCs). In addition, when you actively download the engine for speaker identification or live captions and our download service does not yet provide it, the Software connects directly to GitHub and its content delivery networks, whose servers may be located outside our country; these connections only fetch files and upload none of your content, and basic connection information (such as the IP address) is handled by each of those services under its own policies.
Contact Us
If you have any questions about this policy or your data, or wish to exercise the rights above, please contact us.
- Data controller: Genius Holdings Co., Ltd. Taiwan Branch.
- Address: Room A, 10F, No. 66, Sec. 1, Chongyang Rd., Sanchong Dist., New Taipei City, Taiwan.
- Email: service@genius-gh.com.
- Governing law: Republic of China (Taiwan); any dispute arising from the Software or this privacy statement shall first be resolved through good-faith negotiation, and failing that, handled under the laws of the Republic of China and the applicable rules of court jurisdiction.
We reserve the right to update or revise this privacy statement and related notices in response to legal requirements and company policy; revised versions will be announced on our website and in the application and take effect upon announcement, without separate individual notice, and you may review the revised content at any time. For material changes or changes unfavorable to you, the Software will require you to re-confirm your consent before continued use; if you do not agree, you should stop using and uninstall the Software. If you have questions, please contact us at service@genius-gh.com.
This version takes effect on the date of announcement. Version 2026-10-21