Privacy & Data Boundaries

1. Hovis.ai Public Website

The public Hovis.ai portfolio and product overview pages are read-only static pages. They use no third-party tracking pixels, no advertising cookies, and no public file-upload forms. Public pages have zero access to any local Hovis Workbench instance.

2. Local Cultural AI Profile Store

In the local Hovis Workbench candidate, confirmed Cultural AI profile facts are stored in a user-owned local directory outside cloud sync roots, protected with AES-256-GCM encryption bound to an OS-user key provider (`HOVIS_CULTURAL_AI_PROFILE_V1`). Users can inspect, pause, export, logically delete, or physically overwrite and purge their profile store at any time.

3. Isolated Local Ancestry Vault

The optional Local Ancestry Viewer uses a separate encrypted local vault (`HOVIS_ISOLATED_ANCESTRY_VAULT_V1`). Genetic export files are never sent to Hovis.ai, cloud models, telemetry, or general chat memory.