NETWORK
OUTBOUND CALLS.
Nothing leaves unless you connect something, with two exceptions:
- The update check, in packaged builds. It runs once a day and sends platform and version.
- Currency rates, when you open Finance. No key, no account.
| CALL | HOST | SENDS | WHEN |
|---|---|---|---|
| Update check | api.github.com (release feed) | Platform, version, standard headers. No key, no account, no install ID. | Packaged builds only, once a day, auto-downloads. |
| Currency rates | api.exchangerate-api.com | Nothing but the URL. | When you open Finance. |
| AI provider | Whichever you configure (OpenRouter, Ollama, etc.) | Your question and a summary of your day. Finance data stays out unless unlocked. | When you ask a question. |
| Speech to text | Groq (default) or your configured STT endpoint | Recorded audio. | Only if you set an API key. |
| GitHub commit sync | api.github.com | Repo coordinates, optional token. | Only when you run it. |
| GAS mirror | Your Google Apps Script URL | Facts and triples derived from your activity. | Only if you configure it. Scheduler is unwired. |
| Sync server | Your sync server (default 127.0.0.1:8787) | Credentials and activity data, encrypted in transit. Not encrypted on disk. | Only after you log in. |
| Design registries | ui.aceternity.com, refero.design | Nothing but the slug. | Only when you open the design browser. |
Update check
In packaged builds RHEO checks the project's release feed once a day and downloads a new version in the background. The request sends no account, key or install ID. Like any web request, the server sees your IP address and standard headers such as the user agent.
What a network monitor shows
Not released yet. v0.2.0, pre-release.