July 1, 2026
Why our apps run entirely on your device
On-device by default isn't a feature we bolt on - it's the reason our apps exist. Here's what that means for your data.
Most apps send your data somewhere. A form you fill in, a photo you upload, a letter you paste - it travels to a server, gets processed, and (hopefully) comes back. You’re trusting that the round trip is safe, that the copy on the server is deleted, and that nobody in the middle is reading along.
We build the other way around.
The default is: nothing leaves your phone
Our newer apps run their intelligence on your device. When you paste a confusing insurance letter into Plain English, the explanation is generated right there on your iPhone using Apple’s on-device models. No upload. No account. It even works in airplane mode.
That constraint shapes everything:
- No server means no breach. There’s no database of your documents to leak, because there’s no database.
- No account means no profile. We can’t sell what we never collect.
- Offline-first means reliable. The app doesn’t break when the network does.
Why this matters more every year
The most valuable data is also the most sensitive - medical letters, financial receipts, the subscriptions that reveal your whole life. The industry’s answer has been “trust our cloud.” Ours is: your device is powerful enough now that it doesn’t need to.
That’s the thread running through everything we ship, from Renewly reading your receipts on your own phone to its private iCloud sync. Privacy isn’t the marketing. It’s the architecture.
