Privacy Policy · The TTA Protocol
Your memories stay on your device
Invariant Semiosis Systems, LLC · Effective October 22, 2026 · Version 1.0
The short version
Your memories stay on your device. The app has no account system, no analytics, no advertising SDKs, and no servers of ours that receive your content. Nothing you write, save, or import leaves your device unless you turn on a feature that sends it somewhere you chose.
We can say that because the app has no backend — there is nowhere for it to go. This website does keep some records so we can talk with you; they are listed plainly under this website.
Who we are
Invariant Semiosis Systems, LLC builds The TTA Protocol, a local-first personal intelligence application for iPhone, iPad, Mac, and Apple Vision Pro, and operates this site, insemsysllc.dev. Contact: [email protected].
What the app never collects
- No account, no email, no name required to use the app
- No analytics, telemetry, crash reporting, or usage tracking leaves your device
- No advertising or third-party tracking SDKs are present in the app
- No content is uploaded to us, at any time, under any setting
Where your memories live
Memories are stored in an on-device database inside the app's own sandbox. If you enable iCloud sync, they replicate into your private iCloud container, encrypted by Apple in transit and at rest. That container belongs to your Apple Account. We have no service that can read it and no way to look inside it.
The app also keeps a flat-file copy you control — export, import, and folder watching are explicit actions you take, into locations you choose.
Secrets such as API keys and network tokens are stored in the device Keychain, not in plain preference files.
The only ways data leaves your device
All of them are switches you flip.
- 01
A cloud model you configure
By default the app uses Apple's on-device model, which needs no setup and sends nothing out. If you add an endpoint, your prompt and selected context are sent only to that address.
- 02
Web search
If you enable web search, your search query is sent only to the provider you configure or self-host.
- 03
Kokoro voices
The Kokoro and Fast Kokoro voices call the speech server you configure. System voices run on your device.
- 04
Voice transcription
Speech-to-text uses Apple's system recognizer. We request on-device recognition wherever your device and language support it; when they do not, Apple's system service may process that audio instead of your device. This is Apple's service, governed by Apple's privacy policy, not ours.
- 05
The MCS Memory MCP Server (Mac)
When you switch this on deliberately, your memory becomes readable over your local network by any client presenting your bearer token — which the server refuses to start without. It is off unless you enable it.
Additionally: enabling system search integration indexes your memories into Apple's on-device Spotlight index so Siri and Spotlight can find them. That index stays on your device and is managed by iOS, not by us.
This website — insemsysllc.dev
The app has no backend; this site does, so that you can reach us. What it collects:
- Contact form — your name, email address, and message.
- Support intake (opened from the app) — request type, subject, an optional name, your return email address, and your message.
- Neural Node forum — an email address and handle create your posting identity. Email addresses are not shown publicly; they are used for posting identity and moderation only. Verification codes are stored as hashes and expire within minutes. A session cookie keeps you signed in for 30 days. Everything you post, reply, or boost is public on the forum.
- Contact and support submissions are recorded in our database together with the IP address of the submitting machine, for abuse prevention and triage.
- We send email (verification codes and replies) through a business mail provider, and our hosting and content-delivery providers may keep standard technical request logs.
We do not sell any of this, merge it into advertising profiles, or use it for engagement purposes. It exists so we can answer you and keep the site honest.
Diagnostics
The app records launch and stability information locally to diagnose crashes on your own device. It is written to the system log and local preferences, never transmitted. If you contact support, we may ask you to paste that information yourself.
Purchases
Lifetime access is a one-time purchase through Apple's App Store. Apple processes payment and keeps the receipt. We never see your name, card number, or billing address. There is no subscription and no account to create on our side.
Your rights
Everything you store is yours, and the controls are in the app rather than in an email to us: browse, edit, amplify, purge ephemeral entries, export everything, restore from backup, or delete it all. Turning off iCloud sync and deleting the app removes your data from your device; manage any cloud copy through your Apple Account settings.
If you want help exercising access, correction, portability, or deletion rights under GDPR, UK GDPR, or CCPA/CPRA — or any question about this policy — write to [email protected]. We handle data requests promptly and in any event within the timeframes your applicable law requires (for example, one month under the GDPR, 45 days under the CCPA).
Children
The TTA Protocol is not directed to children and we do not knowingly collect information from anyone under 16.
Changes
If this policy changes materially, we'll update the date above and note it in the app's release notes. Continuing to use the app after a change means you accept the revised policy.
Signal within the noise.