Privacy

Privacy Policy

Aldyn, by Nrdyn LLC. Last updated 8 September 2026.

Aldyn is software you install and run on your own Mac. Nrdyn operates no service that Aldyn connects to, holds no account for you, and never receives your mail, your documents or your clients' information. This policy explains what that means concretely, and — just as importantly — where data does go when you use the AI features.

What Nrdyn collects

From the application: nothing. Aldyn contains no analytics, no telemetry, no crash reporting, no usage beacons and no third-party SDKs. It does not phone home, check in, or transmit anything to Nrdyn — including at install time, at launch, and while running.

From this website: these pages are static and carry no cookies, no analytics and no tracking scripts. Our host records standard server request logs (IP address, timestamp, requested URL, user agent) for security and reliability, which we do not use to build a profile of you.

If you email us: we receive whatever you send — your name, address and the contents of your message — and keep it as ordinary business correspondence so we can answer you and provide support.

What Aldyn stores on your machine

All of it stays on your disk, in a Postgres database and a data directory that belong to you:

• Email fetched from the mailboxes you connect — headers, bodies and attachments, from INBOX and Sent Mail.
• Text extracted from those attachments (PDF, DOCX, images, ZIP contents) so it can be searched.
• The case records built from that mail: businesses, attorneys, notices, deadlines, action items, drafts and scope assessments.
• Your profile and signature, and your app settings.
• An audit log of actions taken in the app.
• Your Gmail App Passwords, encrypted at rest with a key derived from your vault passphrase (PBKDF2 + Fernet).

Aldyn's database and cache run as Docker containers on your machine and are bound to localhost. The application listens on localhost:8000 only, with no inbound network exposure.

Your vault passphrase is never stored — it derives the encryption key each time you unlock. Neither Nrdyn nor anyone else can recover it or decrypt your credentials without it.

Where data goes when you use the AI

This is the part worth reading closely, because "local-first" does not mean "nothing ever leaves the machine."

Aldyn has no AI model of its own. It exposes itself to Claude Desktop — Anthropic's application, installed and signed in by you — through a local MCP server. When you use an AI feature (filing a message, drafting a reply, summarizing a thread, running a Defense check), the relevant email content, documents and case details are read by Claude Desktop and transmitted to Anthropic for processing, exactly as they would be if you had pasted them into Claude yourself.

That processing happens under your own subscription and your own agreement with Anthropic — including their retention and training practices, which you should review at anthropic.com/legal/privacy. Nrdyn is not a party to it, receives no copy, and has no visibility into it.

If you would rather no case content reach a third party, don't run the AI brain. Mail, filing, cases, deadlines, documents and full-text search all work with the AI switched off.

Two other parties are involved by design, both because you chose them:

• Google. Aldyn connects directly from your machine to Gmail over IMAP and SMTP using an App Password you generate. Nothing is proxied through us. Your mail remains subject to Google's terms and your own Google account settings.
• Docker. Docker Desktop runs the local containers. It handles no case data of its own.

Who is responsible for the data

Because the data never reaches us, you are the controller of it in every practical and legal sense. If you are an accountant, enrolled agent or attorney, your existing confidentiality obligations to your clients apply to this machine exactly as they apply to your filing cabinet. Aldyn gives you local encryption and an audit trail; disk encryption, device security, physical access and backups remain yours to manage.

Retention and deletion

Aldyn keeps data until you delete it — there is no server-side copy with a retention clock. To remove everything, run Uninstall.command from the installer, which stops the stack and deletes the app, its configuration and its database. That is irreversible, so export or back up first if you need the history. Individual records can be deleted inside the app.

Deleting Aldyn does not delete anything from Gmail. Aldyn reads your mailbox; it is not the system of record for it.

Children

Aldyn is professional software for accountants, tax practitioners and business owners. It is not directed at children and is not intended for anyone under 18.

Changes to this policy

If we change how Aldyn handles data, we'll update this page and the date at the top, and note the change in the release notes for the version that introduces it. Because Aldyn runs locally, a policy change never applies retroactively to a version you have already installed.

Contact

Questions about this policy, or about how Aldyn handles a specific kind of data: info@nrdyn.com.

Nrdyn LLC · nrdyn.com

This policy describes data handling. It is not legal advice, and Aldyn's Defense check is not a legal opinion or a substitute for professional representation.