Privacy in depth.
Where your Capsule lives, what may leave your computer and what we will not claim — in full.
Heliarko is built around a simple idea:
Your personal material should stay under your control.
But privacy is not one switch.
There is the Capsule on storage you control.
There are optional online services.
And there is this public website.
They are different things.
We believe you should be able to see the difference.
Three boundaries.
Local Capsule
The personal material and structure stored on storage you control.
Optional online AI
A separate connection when an online intelligence function is used.
Heliarko.com
A public website with its own technical data processing.
Three different boundaries.
No blurred language.
What happens where?
A row here claims only what the current build can be shown to do. Each row was checked against the source of Heliarko 1.0.21 in October 2026.
| What you are doing | On your computer | Over the internet | Checked |
|---|---|---|---|
| Storing the Capsule | The Capsule is one folder on your own computer or on a drive you choose. | Not needed in order to create or open it. | Program source, 1.0.21 |
| Browsing your own material | Reading what is already inside the Capsule. Your originals are ordinary files, byte for byte, and stay readable without Heliarko. | Not needed. | Program source, 1.0.21 |
| Searching inside the Capsule | Search by meaning runs on your computer, with a model that comes with the program. | Not needed. Asking Synapse is a separate step: see “Online AI” below. | Program source, 1.0.21 |
| Sending and receiving Messenger messages | Messages are sealed on your computer before they leave, and unsealed again on the computer that receives them. | Yes. The relay carries a sealed envelope it cannot read. Your Capsule ID travels with a send so the relay can check your licence; the server code does not store it with the message. | Program source, 1.0.21 |
| Visiting heliarko.com | Nothing from your Capsule is involved. | Yes. The server processes the ordinary technical request needed to deliver and protect the page. | Website behaviour, described in the Privacy Policy |
| Receiving Heliarko | During the closed test the program is given to you personally. | It is not downloaded from this website. | Closed test |
| Sending us an email | You decide what to write and what to attach. | Yes. Your message and your address reach us so that we can read and answer it. | Described on this page |
| Using optional online AI | You choose when to use it, and what Synapse may use: the conversation and its attachments, your Workspace, or the whole Capsule with the archive read-only. | Yes. A connection is required, and information needed for the request may have to leave the computer. It passes through Heliarko’s server to our AI provider, Nebius, in Finland. | Program source, 1.0.21 |
| Making a backup | Settings → Backup makes one file with everything, on any drive you choose. | Not needed. | Program source, 1.0.21 |
The archive is not the website.
Heliarko is designed around a personal Capsule stored on storage controlled by the person using it.
That distinction matters.
A public website can change.
An online service can change.
A company can change direction.
The local Capsule is intended to remain the durable personal foundation.
Your photographs remain your photographs.
Your documents remain your documents.
Your stories remain your stories.
The word local is easy to print on a website.
We want to use it precisely.
For Heliarko, local-first means that the durable personal Capsule is built around storage under the user’s control.
It does not automatically mean that every possible Heliarko function is offline.
That is why online functions are described separately.
Local should describe architecture, not create an illusion.
Your private archive should not depend on someone else’s permission.
Heliarko is built around a Capsule stored on storage you control.
The local Capsule is the foundation.
Optional online functions are a separate layer and should be described as such.
Local at the core
The personal archive is built around storage you control.
Online when you choose
Some intelligent functions may require an external AI connection.
That boundary should be clear rather than hidden behind the word “local”.
No hostage door
Optional online services should extend the Capsule, not become the only reason your own material remains usable.
Your exit matters too
Something truly yours includes the right to stop using a service and the right to remove your own material.
Ownership is not a feature. It is the starting point.
Intelligence from outside should never enter unnoticed.
Some Heliarko functions may use an external AI service.
When such a function is used, a network connection is required.
Information needed for that request may have to leave the computer so the external service can produce an answer.
In Heliarko 1.0.21, Synapse asks you to choose what it may use before its first online request: the conversation and its attachments, your Workspace, or the whole Capsule with the archive read-only.
The request then passes through Heliarko’s server to our AI provider, Nebius, in Finland.
The AI cannot change the originals in your archive.
Search by meaning and the rest of the Capsule keep working on your computer without it.
The boundary must be described honestly.
Local
The Capsule on storage you control.
The durable personal foundation.
Online AI
An optional external intelligence layer.
Used only when you use a function that needs it.
The website may explain the desired conceptual distinction.
In Heliarko 1.0.21 that door is visible: Synapse sends nothing online until you have chosen what it may use.
The principle is:
You should not need to wonder which side of the door you are on.
AI may work with your context. It does not become the owner of it.
Synapse is the part of Heliarko that helps search, connect, summarise, write and think with information.
Some work may use local structure.
Some functions may use optional online intelligence.
These are not automatically the same operation.
We will describe them as they actually work.
Not as a marketing sentence wishes they worked.
Say exactly what the product can prove.
We do not publish claims such as these unless the current implementation has been verified:
“encrypted at rest”
“zero knowledge”
“no master key”
“secure deletion”
“end-to-end encrypted”
A PIN is not automatically encryption.
A password is not automatically encryption.
And the word “secure” is not a technical explanation.
What the 1.0.21 program source does show:
Messages are sealed on your computer before they leave and opened on the receiving computer; the relay carries what it cannot read.
Files on disk are not encrypted. Protect the computer and keep two backups in different places.
No privacy claim should be stronger than the software behind it.
Local control also means local responsibility.
Keeping a Capsule yourself gives you independence.
It also means the physical storage matters.
A failed drive can fail.
A stolen laptop can be stolen.
A deleted file can be deleted.
If material matters, keep a backup.
If it matters greatly, keep more than one.
We would rather remind you of this now than make a promise software cannot keep.
Visiting heliarko.com is not the same as opening your Capsule.
The public website is separate from your local archive.
Like most websites, its server may process ordinary technical information required to deliver and protect the site.
During the closed test the program is not downloaded from this website.
This does not by itself give the public website access to the contents of your local Capsule.
Heliarko is not being built around selling advertising against your private archive.
Your personal Capsule should not become a profile used to choose which advertisement to show you.
For this website, keep unnecessary tracking out.
If analytics or another non-essential website technology is introduced later, explain it and obtain consent where required.
Privacy choices should not be puzzles.
Privacy can disappear through the side door.
Read the video transcript
Heliarko. Six rooms, one Capsule. Real screens with fictional sample data.
The Vault keeps photographs and documents together. These four files are a small demonstration archive.
Identity keeps memoirs, family connections and key moments alongside the material that gives them meaning.
Workspace brings documents, tasks and the calendar into one place for everyday work.
Synapse is the doorway to external AI. Online access is required; no live AI answer is shown in this tour.
Messenger is for family communication. This demonstration profile has no conversations.
Settings brings language, text size and access settings together. Heliarko supports five interface languages.
Download the videoA website may use no advertising cookies of its own and still load external services that collect information about visitors.
We want to avoid that where practical.
Where practical, Heliarko demonstrations should be served directly or loaded in a privacy-preserving way.
If an external media provider introduces additional data processing, we make that visible before external content loads.
The video is here to explain Heliarko.
Not to follow the visitor around the internet afterwards.
You decide what you tell us.
If you write to Heliarko, we need the information contained in that communication in order to read it and reply.
That may include your email address and anything you choose to put in the message.
Do not send a copy of your Capsule just because something went wrong.
For technical support, send only what is necessary to understand the problem.
A screenshot of an error is usually better than a folder full of private material.
Good support question
“When I open Search and choose this option, I receive this error.”
Less good support question
“Here are twenty years of family documents. Please find the problem.”
Please don’t.
We would rather ask one more question than receive information we did not need.
“Military-grade”
Meaningless without explaining the actual protection.
“100% private”
Too absolute for a product that may use optional online services.
“AI never sees your data”
Not a responsible claim if an external AI is deliberately asked to work with selected context.
“Trust us”
Not enough.
Show the boundary. Explain the system. Let the person decide.
A private product should make important choices visible.
Where is the Capsule stored?
Which functions work locally?
Which functions require the internet?
What information may be sent when online AI is used?
How is local access protected?
How do I make a backup?
How do I move my Capsule?
How do I remove it?
If an answer matters, it should not be buried.
- Capsule model
- Local-first personal storage
- Optional online AI
- Synapse, through Nebius in Finland, when you choose to use it
- Advertising based on Capsule content
- No
- Files on disk
- Not encrypted
- Facts on this page
- Checked against the 1.0.21 program source, October 2026
- Technical privacy specification
- A formal technical review is still to come
- Privacy Policy
- Available separately
This record should change whenever the product changes.
A privacy page that describes last year’s software is not a privacy page.
Plain language first. Legal detail when you need it.
This page explains the privacy model of Heliarko in ordinary language.
The formal Privacy Policy explains the current test-period controller, website processing, service providers and legal rights.
The two pages should describe the same reality.
If they disagree, that is something we need to fix.
Yours means yours.
Not because the phrase looks good under a logo.
Because architecture, interface and documentation should make ownership real.