- It runs on your computerOn this computer
- There is no cluster behind this page. The part that does the work runs on the machine in front of you, so your files never have to leave it.
- Off the network by defaultThis computer by default
- The parts of Horon that run on your computer answer this machine only. The assistant, mail, messenger, and the service that keeps your devices in step answer this computer alone. Reaching the assistant from another device takes a switch you turn on, and that switch is off by default.
- Inbound networkNone
- Nothing on the internet can reach it. The assistant answers only inside the work you started on this computer, and nothing is opened for another machine to connect to unless you turn on that switch.
- Provider credentialsA private file only you can read
- Saved provider credentials are written in one step, so a crash cannot leave a half-written key behind, and nothing else on the machine can read them.
- TelemetryOff by default
- The agent reports nothing until you turn it on.
- Verification codesScrambled form only
- The one-time code we text you is never stored as you typed it. Only a scrambled form of it, with a secret mixed in, is kept, so the stored value cannot be turned back into the code.
- Sign-inPasskey or social
- A passkey, Google, or Apple signs you in without a password. Email and password also works, and a provider appears only once its credentials are configured.
- Access tokensA signed key we can verify
- An access token is signed when it is issued, and the signature is checked against a published list of keys before anything trusts it. A forged token fails that check.
- Device permissionsPer device, audited
- The helper on a computer refuses file, messenger, and command work without a consent file for that device, and writes every allow or deny to a log you can read.
- Your accountStored on horon.ai
- Your account, its sign-ins, and your passkey entries live in our own database on horon.ai (Cloudflare D1). Your files are not part of that.
- Download records180 days
- A Korean mobile number is stored with your account, and each download records your IP address, browser user agent, and the time it happened. Download records are deleted after 180 days.