Privacy First

Security & Privacy

Expansas is built on a simple principle: your data belongs to you. This page says plainly what runs today and what is still being built.

How It Works Today

Chat in the One People app by Expansas is answered by AI models on Expansas-operated servers or, for some models, by third-party AI providers (Google Cloud, Fireworks AI, AWS Bedrock). Runs on Expansas services. Each request carries the conversation context the model needs to answer. Your chat history is kept on your device or your Nexus.

Cloud AI is the default today
Connections to our servers use HTTPS (TLS)
You can point the app at a model server you run, such as Ollama or LM Studio
There is no local or offline mode yet

Local-First (Designed)

A local mode, where conversations and AI processing stay on your device and no account is needed, is being built. It is not available yet, and we will say so here when it is.

Status: designed, not live
Cloud features will stay opt-in once local mode ships

End-to-End Encryption (Designed)

Encrypting traffic between Beacon devices and your Nexus end to end, and keeping only encrypted data in Cloud Nexus, are part of the design. Neither is in place today, so we do not claim them.

Status: designed, not live
We make no encryption-at-rest or zero-knowledge claims today

Your Data

We do not sell your personal information. To get a copy of your data or ask us to delete it, contact us and we will handle the request.

Export and deletion on request
Security issues can be reported through our contact page

A Note on Compliance

Expansas is an early-stage platform. We do not currently hold SOC II or other audit-based formal compliance certifications. Business and regulated customers must request and sign a BAA to enable HIPAA-covered handling. Our security architecture includes practical controls such as encryption in transit, role-based access, per-business isolation and audit logging, but these are not certifications. If your use case requires certified compliance today, please contact us to discuss your needs.

Read the Full Privacy Policy

Our privacy policy explains in plain language exactly what data we collect, how we use it, and your rights.