The simplest way to reduce risk is to not hold data you don't need to. RG AI's local-first architecture is a security decision as much as a privacy one.
Sign-in is handled by Firebase Authentication (Google infrastructure). RG AI never sees or stores your password. Firebase handles that entirely.
If you find a security issue, please report it through the contact page rather than a public issue tracker, so it can be fixed before it's disclosed publicly.
Privacy
RG AI is built local-first, so privacy is the default, not an upsell.
Your API keys and chat history stay in your browser's local storage, not on our servers.
Bring your own provider key, so usage and billing are between you and that provider directly.
RG AI doesn't log or store the content of your conversations.
Performance
Responses appear token by token, the moment they're generated.
Your message passes through a lightweight RG AI route straight to your chosen provider and back, nothing stored along the way.
Optimized for low latency on modest, everyday hardware.