Security

Your data stays with you.

Personarium is built local-first: chats, images, and your API keys never leave your device. The public hub is technically locked to SFW and reviewed continuously.

100% local

Chats, images, and audio live exclusively on your device. No server ever sees or reads your content.

Your keys stay your keys

API keys for chat, images, and speech go straight into your operating system's keychain and are never sent to us.

No server in the content chain

There is no AI proxy running on shared keys and no plaintext sync of your conversations — your device talks directly to the provider you chose.

Vault with AES-256

The optional vault encrypts its database and media with SQLCipher (AES-256) and XChaCha20-Poly1305, key derivation via Argon2id.

Built for the quantum era

Encryption runs entirely symmetric at 256 bit throughout — that already holds up against quantum computers. Should a key exchange ever become necessary, the rule is binding: hybrid, combining a post-quantum method (ML-KEM) with classical X25519, never classical alone.

Signed auto-updates

Every update is cryptographically signed. The signing key lives offline only and never touches a server.

Strictly SFW, enforced by design.

Every upload runs through a moderation check: an image tagger for pictures, text classification for character descriptions, and a manual review queue for edge cases. If a published item still breaks the rules, you can report it any time — no account required.

What the hub knows about you.

Your hub account knows only your email address and membership status — never your chats or characters. You can delete your account yourself, any time.

More detail lives in our privacy policy. You can report hub content any time.