Security
Your data stays with you.
Personarium is built local-first: chats, images, and your API keys never leave your device. The public hub is technically locked to SFW and reviewed continuously.
100% local
Chats, images, and audio live exclusively on your device. No server ever sees or reads your content.
Your keys stay your keys
API keys for chat, images, and speech go straight into your operating system's keychain and are never sent to us.
No server in the content chain
There is no AI proxy running on shared keys and no plaintext sync of your conversations — your device talks directly to the provider you chose.
Vault with AES-256
The optional vault encrypts its database and media with SQLCipher (AES-256) and XChaCha20-Poly1305, key derivation via Argon2id.
Built for the quantum era
Encryption runs entirely symmetric at 256 bit throughout — that already holds up against quantum computers. Should a key exchange ever become necessary, the rule is binding: hybrid, combining a post-quantum method (ML-KEM) with classical X25519, never classical alone.
Signed auto-updates
Every update is cryptographically signed. The signing key lives offline only and never touches a server.
Strictly SFW, enforced by design.
Every upload runs through a moderation check: an image tagger for pictures, text classification for character descriptions, and a manual review queue for edge cases. If a published item still breaks the rules, you can report it any time — no account required.
What the hub knows about you.
Your hub account knows only your email address and membership status — never your chats or characters. You can delete your account yourself, any time.
More detail lives in our privacy policy. You can report hub content any time.