Data — under clear control.

How local and cloud models work

• Local models stay local: messages are processed on the user’s computer and are not sent to the Хонер ПК-агент server or an external provider.
• The cloud gateway is enabled only after one-time consent: the app shows in advance that the message text and necessary request context will be sent over HTTPS to the Хонер ПК-агент server and then forwarded to the chosen model provider.
• The Хонер ПК-агент server acts as a transit gateway and does not store model request or response text in a database or application logs.
• The cloud model provider processes the transmitted request under its own terms and data policy. Хонер ПК-агент sends the request only to the provider of the selected model.
• Consent can be withdrawn in settings. After withdrawal, the cloud gateway is not used, and local models continue to work.

What is collected without conversation content

For load and quality monitoring, Хонер ПК-агент receives only limited statistics: number of requests and tokens, selected models, time and technical response result, app version and channel, connection status, selected access mode, feature availability, and generalized computer capabilities. The Windows account name, computer name, local paths, and file names are not transmitted.

Only a nickname, global numeric ID, public device key, and necessary technical session markers are used for the profile. There is no separate real-name field. This data does not give the administrator access to the contents of chats or the user’s files.

Semantic analytics are performed locally. Only predefined categories and numerical indicators may be sent to the server, without the original message and response. The full activity log with commands and paths is stored securely only on the user’s computer and is available to them in the app.

Technical events and error reports

• For the “online” status, the app maintains a service connection and sends a short signal about every 15 seconds. If the connection is absent for 60 seconds, the device is shown as having no connection.
• In the event of a crash or technical error, an anonymized report may be sent automatically: action category, safe result code, time, app version, and channel.
• Before sending, secrets, user text, the Windows name, local paths, and file names are removed. Chat texts, model responses, attachments, passwords, and API keys are not included in such a report.
• The administrator sees only sanitized technical events. There is no remote access to the local full log, chats, or the user’s files.

Retention periods and deletion

• Request and response texts sent through the Хонер ПК-агент gateway are not stored after the transfer is complete.
• The profile is stored until the user requests deletion.
• Sessions are stored for no more than 30 days after they end; revoked sessions become invalid immediately.
• Information about launches, connections, crashes, and sanitized technical errors is stored for no more than 30 days.
• Aggregated usage statistics are stored for no more than 30 days and then deleted in limited batches.
• The protected local activity log is stored for no more than 30 days and is size-limited; old entries are deleted automatically.
• After a profile is deleted, its global ID is not reused.

How consent works

Consent is requested once before the first request to the cloud gateway and is tied to policy version 2026-08-10. If the data-transfer terms change, the app will request new consent. Refusal does not block local models or local agent features.

Owner contact for profile and data deletion requests: https://t.me/functional_XONERA.