GlirOSSecurity
Your AI, on your terms
GlirOS runs AI models on your own device, keeps your keys away from every model, and lets you switch the network off and mean it. This page says plainly what stays with you, what can leave, and what GlirOS can't protect.
What stays with you
Your chats, your files and your keys stay on your own device, and you can switch the network off entirely.
Your chats stay on your device
Chats, files, pictures and settings are saved on your PC or in your browser, not on gliros.com. The GlirOS Helper and the models on your PC answer without anything leaving your device.
Keys never reach a model
API keys, passwords and tokens are kept out of every chat: in the browser for the web version, in Windows Credential Manager for the desktop app. No AI model ever gets them, so a model can only say where they are managed. A message that looks like it holds a key is stopped with a question before it is sent.
Offline, and incognito
Settings > Security can block all network traffic: GlirOS then sends nothing out, and the device's models, and the tools that don't need the internet, keep working. An offline chat uses only what is on the device. An incognito chat is never kept: leaving it deletes its messages, files and log.
Encrypted backups
Settings > Backup makes one file encrypted with a password you choose. GlirOS doesn't keep the password. API keys, licence keys and the remote access link are never in a backup.
What can leave, and when
What goes out is what you use – a cloud model, a web search, a tool that works online – GlirOS says where it goes, and afterwards you can see what went.
Cloud models only when you choose
A cloud model needs your own API key, and its messages go straight to that company, billed to your account. GlirOS says where they go before anything is sent. The key is never sent to gliros.com.
See what left your device
Under each answer, "How this answer was made" shows what left your device. A chat's ⋯ menu lists everything the chat sent to a cloud company, a search service or a tool's site, with to whom and what kind, never the words.
Sharing is opt-in
A tool's result is shared as a link only when you ask, and GlirOS says first what goes there and for how long. The share site sees an account number, never your name or e-mail.
Remote access, end-to-end encrypted
Opening your own PC from a browser goes through one outgoing connection to the GlirOS relay: no port forwarding, no admin rights. The relay passes the traffic on without being able to read it. Your PC checks that each connection carries a grant that app.gliros.com signed for your account and, by default, lets in only the browsers you have allowed on it, with its Allow button or a code it makes; you can remove one there at any time. It works while the PC is on and GlirOS runs. Your account keeps only the PC's public key and name, and you can compare the key's fingerprint on both ends.
The app, our sites, and the limits
How the app and gliros.com are built to keep you safe, and what no app can promise.
Tools in a sandbox
Tools run in a sandbox, apart from your chats and files. They see only what GlirOS hands them: the files of the chat you allow for GlirOS's own and catalogue tools, never for home-made ones. A tool that uses the internet says so in the catalogue and lists the sites it uses.
No admin rights
The desktop app installs in your own user folder and never asks for admin rights. It checks every model it downloads from GlirOS's catalogue against its published hash before using it.
Our sites
No ads and no tracking. Your account password is stored as a slow one-way hash (Argon2id), and the sites set only the cookies needed to sign you in, protect forms and remember a choice. Visits are counted without keeping your address.
What GlirOS can't protect
What you send to a cloud model is handled by that company under its own terms. Anyone with access to your PC or browser can open GlirOS there. What is kept on your device can be read by others who use the same Windows account or browser. Use a private window on a shared computer, and lock your PC. GlirOS hasn't had an independent security audit yet; when it has, this page will say so.
Found a problem?
Please tell us through the contact page on support.gliros.com before telling anyone else, so we can fix it first.
AI answers can be wrong too. Why, and what you can do: How AI works