Home / Blog / Private by design

Private by design: what "on-device by default" really means

By the Kensora team · June 2026 · 5 min read

Open almost any health or wellness app and the same thing happens out of sight: the most personal details you just entered are sent to a company's servers. Not because your phone could not handle them, but because keeping your data on a server is convenient for the company. It is easier to analyze, easier to build a business on, and easier to lose.

Kensora is built the other way around. Your most personal information stays on your own device by default. That single choice changes almost everything downstream, so it is worth being precise about what it means and what it does not.

What "on-device by default" means

It means the work happens where your data already lives. Your journal entries, your check-ins, the rhythm of your sleep and movement, the texture of your relationships: these are read and organized on your phone, not uploaded to be processed somewhere else. The default is local. Nothing about your private life has to leave the device for the app to be useful.

When something does benefit from more capable assistance, that is a choice you make, in the moment, with clear language about what is involved, rather than a default you have to discover and switch off.

Why this is the harder path, and why it is worth it

Building on-device is more work. It is simpler to send everything to a server and reason about it there. The local-first path means doing real engineering so that a phone can hold the whole picture privately. We think that is exactly where the effort belongs, because the alternative quietly asks you to trade away the most sensitive record you will ever produce.

• Your data is yours, and stays that way. It is not sold, and it is not used to target you.
• There is no ad business. Nothing in Kensora depends on holding your attention or harvesting your behavior.
• Less to lose. Data that never leaves your device cannot be exposed in someone else's breach.

A note on honesty: privacy is an architecture, not a slogan. The details that matter are in the privacy policy and the consumer health data policy. If anything there ever contradicts a sentence on this page, the policies govern.

What this is not

On-device by default is a privacy and security commitment. It is not a claim about diagnosing, detecting, or predicting any medical or mental-health condition. Kensora is a calm, private companion that helps you see your own patterns and take the next grounded step. It is not a medical or crisis service.