Privacy

Private normally means a paragraph in a policy: a company describing what it will not do with work you have already sent it. You cannot audit that, and you never see the moment your material leaves the machine.

Privacy in gOS is a route rather than a promise. The question on every turn is where the work should happen, and one setting decides the default.

Read the Privacy Policy

Your MacApple Silicon · macOS 26app sandbox containerSpaces and their filesruns, traces, memorythe registry and the flowsmodels kept on disknone of it is uploadedon-device workersInstantThinkingWorkingPrivatePersonalizedSettings → Runtimelocal-first: work stays here unless you send itonline-first: hosted models answer by defaultone gateHosted capacityonly what the task carriesmetered against creditsshown in the WalletPrivate stays local bydefinition. It has noroute out of the machine.
Two lanes and one gate. Local work never reaches the boundary; hosted work carries only what the task needs, and it is metered.

01

One switch sets the default.

Settings → Runtime chooses local-first or online-first. Local-first keeps work on the machine unless a task genuinely needs more than the machine has. Online-first hands the default to hosted models. It is one visible choice, in one place, rather than a policy buried under a menu.

Settings → Runtimeone switch, one place, visiblelocal-firstthe machine answers unless the task needs more than the machine hasonline-firsthosted models answer by default, and the machine is the exceptionThis is a posture, not a promise about every byte: a task you explicitly send out still goes out.What the setting decides is the default: which side has to be argued for.You can change it between two turns of the same conversation.
A posture, not a promise about every byte: it decides which side has to be argued for.
  • Local-first or online-first, your call.
  • The posture is visible, not implied.
  • Change it whenever the work changes.

02

Local means on this machine.

gOS runs models directly on Apple Silicon, and the Private profile is local-only by construction, with no route out of the Mac. Image work renders here when the runtime is local-first. When work stays local there is no upload, no round trip, and no copy sitting on someone else's disk.

runs herechat and reasoningfile search across Spacesimage generationthe Private worker, alwayshowmodels on Apple Silicon,loaded into memory,answering from diskand from your fileswhat it meansno upload, no round trip,no copy of the work onsomebody else's diskand it still works offlineThe Private profile is local-only by construction rather than by configuration:there is no remote route attached to it to switch on by accident.Local is also usually the faster answer, which is why it is the interesting default rather than the virtuous one.
Local is usually also the faster answer, which is why it is the interesting default rather than the virtuous one.
  • On-device inference, not a thin client.
  • Private has no route out.
  • Rendering happens where the files are.

03

Your workspace lives in the app's container.

Spaces, files, runs, memory and the registry live inside the sandbox container macOS gives the app. Nothing about your workspace has to be uploaded for gOS to work. What leaves is what a specific task carries, once you have allowed that task to reach out.

~/Library/Containers/computer.newos.appStore/ · spaces, runs, orbs, identityFlows/ · the manifests the grid readsRegistry/ · the atoms the Sim searchesAssets/ · runtime-swappable materialgranted by macOS, not chosen by uswhat leavesonly the payload of a task youallowed to reach out, and onlyfor as long as that task runsyour workspace is not a sync targetgOS does not need a copy of your work somewhere else in order to function. Nothing is mirroredfor convenience, and there is no account whose deletion would take your files with it.
Your workspace is not a sync target. What travels is the payload of a task you allowed.
  • The workspace is not a sync target.
  • Only the task's payload travels.
  • You own the files it produces.

04

Hosted work is metered and visible.

When a task does use hosted capacity, that is a lane with a meter on it. Usage is charged against credits you can see in the Wallet. The expensive path stays legible instead of becoming ambient.

Walletthe meter you can opencredits remaininga number, not an estimatewhat spent themper run, with the flow namedyour identitythe DID and the addressHosted work is a lane with a meter on it. Local work has no meter because it has no marginal cost,which is the whole reason the two lanes are kept apart in the first place.The expensive path stays legible instead of becoming ambient.
A meter on one lane and none on the other, because only one of them has a marginal cost.
  • Know when a task went out.
  • See what it cost, in the Wallet.
  • Keep the heavy work deliberate.

05

Memory is a place you can open.

Mind holds what the system has learned: prior Spaces, live work, remembered context. It is a surface you open and read rather than a hidden profile. Learning proposes changes and waits. Promotion is an approval, like every other durable change.

Mindmemory as a place you can openprior Spaceswhat you worked on, and whenlive workwhat is running right nowlearned memorywhat it believes about how you workread it, correct it, or delete a belief that has gone staleLearning proposes. Promotion is an approval, so nothing gOS decides about you takes effectbefore you have seen it written down in words.
Read it, correct it, delete a stale belief. Learning proposes; promotion is an approval.
  • Review what is remembered.
  • Correct what has gone stale.
  • Approve learning before it changes behaviour.

Ownership is the shape of the product: the files, the run that made them, and the workflow that will make the next one.