AI consent & privacy

AI is optional. Local editing, full-text search, Types, and Workflows do not require a model provider.

Local and cloud providers

Desktop can connect a bring-your-own-key cloud provider or a local provider such as Ollama. Web and mobile cannot safely hold provider keys in the renderer; when configured, they call the Lar AI backend after client-side consent.

Local models keep prompt processing on the machine, though downloading or updating a model can still use its vendor’s network path. Cloud models receive the payload shown by the consent surface.

Consent flow

Before a cloud dispatch, Lar evaluates the action’s consent level and displays a user-visible request when approval is needed. Review:

• The action requesting access
• The provider and model
• The Object or assembled context involved
• Whether approval applies once or establishes standing consent

Standing consent reduces repeated prompts; it does not make the action invisible. Dispatches remain recorded in AI activity/usage accounting.

Workflows with AI nodes have an additional safety constraint: an automatic Workflow needs standing consent. Without it, the matching action can degrade to a suggestion requiring a user gesture.

Exclude an Object

Use the Object action to Exclude from AI when its content must not enter AI retrieval or tools. The exclusion is enforced at broker, assistant retrieval, semantic/agent boundaries rather than being only a visual filter.

Exclusion does not remove content previously sent to a provider. Consult that provider’s retention policy for already-dispatched prompts.

Web search and tools

Agentic chat can use workspace tools and, where supported and enabled, provider web search. Tool activity is shown in the conversation. Web search is opt-in because it adds external egress beyond the configured model request.

Review and revoke

• Inspect AI activity and spend controls in Settings.
• Disable provider web search when it is unnecessary.
• Clear or replace provider credentials from the desktop AI Provider page.
• Disable AI entirely without affecting ordinary workspace access.

Continue with AI assistant & actions.