Our principles
Local-first
We run software on your device where possible. Momentum stays local. For features that need a hosted service, including the planned VSE API and MCP, we explain what runs there.
Manifesto
Privacy starts in the architecture.
Our four principles cover local processing, data retention, optional services, and product availability. Each product below explains how they apply.
Our principles
Our principles
Zero data retention
We do not build a business on retaining your journeys, contracts, or personal profiles. If that policy changes, we will explain the change.
Our principles
Opt-in only
You start every feature that sends data away from the device: location, a model you configure, or a hosted endpoint when one ships. We do not send that traffic by default.
Our principles
Honest claims
Each product page states its coverage, availability, packaging, and limits. We mark work that has not shipped yet.
How each product applies the principles.
The same rules, applied to different products.
Pathways
LOCAL-FIRSTZDROPT-INHONEST
On-device pathfinding. No trip data retained. GPS starts when you do.
Pathfinding runs in the browser on a local graph. The browser computes the start, end, and mode weights on your device. We do not retain those queries or results. Coverage is in Hong Kong for now.
Vertral Spatial Engine
Coming soonEDGEZDRHONEST
Hosted edge. API and MCP coming soon. No trip dossier.
Vertral Spatial Engine provides the graph and path context behind Pathways. Its hosted Worker API and agentic MCP are coming soon, so agents can query covered routes. Those endpoints may keep operational logs when they launch. Coverage is in Hong Kong for now.
Ionic
LOCAL-FIRSTZDROPT-INHONEST
Contracts are checked before merge. Essential stays local. Enterprise is coming soon.
Ionic checks compatibility between agents. Register behavioural contracts, then catch a breaking change before it is merged.
Essential
The registry stays on your machine. We do not collect telemetry from your agent docs. Structural checks run without a model.
IonicEnterprise Coming soon
Coming soon, with support, air-gap packaging, SSO, a multi-team registry, audit logs, and policy controls around the same engine. Essential retains its complete checks. Organisation audit logs will be provided under contract, separately from Essential telemetry.
Enterprise
Momentum
Local-onlyLOCAL-FIRSTZDRHONEST
Local continuity. The store stays on your machine and keeps your checkpoints.
Momentum stores versioned goals, typed memory, and checkpoints for agents, then resumes through a local stdio MCP over SQLite. The stream stays on your machine. We do not host it or use it to build another profile of your walks or contracts.
Where the limits are.
ZDR
We do not log your trips or contracts. The site still loads pages, scripts, and tiles, so hosts may see ordinary request metadata. We will say so if our retention policy changes.
What you start
You turn on GPS, Ionic semantic review (sent to a model you configure), and the VSE API / MCP when they ship. Hosted VSE may keep operational logs. Momentum stays local and sends no continuity stream to us.
Enterprise
Coming soon. Organisation audit logs under contract are not Essential product telemetry.