Some features use an AI provider — a company such as OpenAI or Anthropic whose models run on their computers, not this one. Which provider is used is chosen by whoever runs this server. Here is what each feature sends.
Sent to the AI provider
- Ask the Rummager
- What you type, the names of the space's places and tags, and whatever it looks up to answer you.
- Captures
- The words of every capture are checked once, in case they contain something like a password. Pressing Let the Rummager try sends them to the assistant too.
- Photos
- A photo capture is sent to be described — after it has been shrunk and its hidden details, including GPS position, removed.
- Voice notes
- Sent to be transcribed if the server uses a hosted transcription service. It may instead transcribe them itself, in which case they never leave.
- Suggest tags, and choosing between places with the same name
- The thing's name and description, and the tags or place names to choose from.
Never sent
- Search. Finding things by meaning is worked out on this server, by a model that runs here.
- Your email address, your other spaces, your tokens or your settings.
- Anything at all, if the operator hasn't set up an AI provider.
Other services
- Scanning sends the barcode number — and nothing else — to Open Library or Open Food Facts.
- Email (magic links, invitations, the weekly email) is sent through Resend.
Other people in your space
Anybody in a space can name a place or a thing anything they like. The Rummager is told that names are just names, never instructions, and it can only ever act inside the one space — so the worst a mischievous name could cause is changes in that space, all of which can be undone.