Legal
Security
Version 1.0 · Last revised 29 October 2026
The safest place for your data is a place it never leaves. Sublunar is built so your chats, files and memory stay on your own Mac. This page explains how we protect what's there, what the app does and doesn't send over the internet, how this website is secured, and how to tell us if you find a problem.
The short version
- The AI runs on your Mac. Your chats, files and memory are never sent to us, and we have no servers that could store them.
- Your chats are encrypted on your disk with a key kept in your Mac's Keychain, on this Mac only.
- The app sends no analytics, no crash reports and no tracking. It only goes online to download things (models, books, tools) and, if you turn it on, for the Browser.
- Sublunar only reads your Notes, Mail, Calendar, Reminders or folders when you switch them on and macOS asks for your permission.
- Found a security problem? Email hello@sublunar.ai with "Security" in the subject. We read every report.
1. Your data stays on your Mac
Sublunar's AI models run on your computer's own chip. When you ask Glim something, the question, the answer and anything Glim looks up are processed on your Mac. We do not run servers that receive, store or train on your conversations, and nothing in the app sends your content to us.
Because of that, there is no account database of your chats to leak, no server to subpoena for them, and nothing to lose if Sublunar ever went away: the app and your data keep working on your Mac.
2. Encryption on your disk
- Chats and Today widgets are encrypted with AES-256-GCM using Apple's CryptoKit. The key is created on your Mac and stored in your login Keychain, set to this device only, so it isn't synced to iCloud or other devices.
- These files are readable only by your macOS user account.
- We recommend turning on FileVault (System Settings › Privacy & Security) so your whole disk is encrypted if your Mac is lost or stolen.
3. What the app sends over the internet
Sublunar works offline. It only connects to the internet in these cases, and never sends your chats, files or memory:
| When | What happens | What leaves your Mac |
|---|---|---|
| The first time it opens | Downloads Glim's built-in emergency knowledge (first aid, water, food, repair guides) from Kiwix's public servers | A normal file download request. Like any download, the server sees your IP address. Nothing about you or your use is included. |
| You download from the Library | Fetches the book or tool you picked (for example Wikipedia from Kiwix, CyberChef from GitHub) | The same: only the request for that file, with no cookies and no history kept by the app. |
| You turn on the Browser | Opens the web pages you type, like any browser. It's off by default and keeps no history or cookies between sessions. | What any browser sends to the sites you visit. Glim doesn't read a page unless you ask. |
Coming next: a web lookup where Glim shows you the exact search first, with names and numbers removed, and sends nothing until you tap Allow.
4. Your Mac's apps and permissions
Sublunar can read your Notes, Mail, Calendar, Reminders and the folders you choose, so Glim can help with your own life. Each source is off until you switch it on in This Mac › Sources, and macOS asks for your permission first. What Glim reads is used only to answer you, on your Mac. Locked notes are skipped.
To read Apple Mail and Notes, macOS requires Full Disk Access, which the macOS App Sandbox doesn't allow. So Sublunar is not sandboxed. We're telling you this plainly. In its place:
- The app is signed with our Apple Developer ID and notarized by Apple, which means Apple has scanned it for malicious software, and macOS checks that it hasn't been changed.
- It runs with Apple's Hardened Runtime, which blocks code injection and tampering while it runs.
- You can remove its access at any time in System Settings › Privacy & Security.
5. Built-in safety
- Sealed reading views. Books and tools in the Library open in web views that are blocked from loading anything from the internet.
- Your Mac comes first. Glim only loads a model when there's enough free memory left for your other apps, with fixed limits on memory, answer length and time.
- Checked numbers. If Glim gives a dose or amount that isn't in its sources, the app adds a warning to check the label or official guidance.
6. This website
- Served only over HTTPS, with HSTS preload so browsers never connect without encryption.
- A strict Content Security Policy: pages can only load code from this site (plus Stripe for sponsor payments), can't be embedded in other sites, and block camera, microphone and location access.
- No cookies, no analytics, no tracking scripts. Fonts are served from this site.
- Forms are rate-limited. Internal tools are protected by keys that are never in the page source.
- Hosted on Cloudflare, which encrypts stored data and filters attacks. What this site collects is listed in our Privacy Policy.
7. Reporting a security problem
If you think you've found a vulnerability in Sublunar or this website, please tell us first, privately, so we can fix it before anyone is harmed.
- Email hello@sublunar.ai with "Security" in the subject. Include what you found, how to reproduce it, and what an attacker could do with it.
- We aim to reply within 3 working days, keep you updated while we fix it, and tell you when it's done.
- With your permission, we'll credit you when we announce the fix. We're a small team in private beta and can't offer paid bounties yet.
Please don't: access, change or delete other people's data; run tests that slow down or break our services; send spam through our forms; or try to trick people (social engineering). If you act in good faith and follow these rules, we won't pursue legal action against you for your research, and we'll work with you to understand and fix the problem.
This page is also linked from our security.txt.
8. If something goes wrong
No system is perfectly secure. If we ever learn of a breach that affects you, we'll tell you and the data protection authority without undue delay, as the GDPR requires, and explain what happened and what we're doing about it.
9. Changes
We'll update this page as Sublunar grows, for example when sign-in, web lookup or new connectors arrive, and note the date at the top.
10. Contact
Sublunar · Buildable Labs, Romania · hello@sublunar.ai