Privacy

Confucius Captions is local by design:

• Uvicorn binds only to 127.0.0.1:8765.
• State-changing HTTP requests and WebSockets reject non-local Host and Origin headers.
• Audio is processed by MLX on the Mac and is not sent to a hosted API.
• File uploads use a local temporary file and are deleted on every exit path.
• The app contains no telemetry and does not download models automatically.
• Model weights stay outside the .app bundle in Application Support.

The embedded page requests microphone or screen capture only after a button press. macOS controls those permissions in System Settings → Privacy & Security.