Your most sensitive details — an email address, a phone number, a credit card, an API key — shouldn't have to leave your device just to get a good answer. Starting now, they don't have to.
Redaction that happens on your device
Turn on PII redaction under Privacy and Anuma scans each message for sensitive information right on your device, before anything is sent. Detected values are replaced with neutral placeholders like [EMAIL_1] or [CARD_1], and only that redacted version travels to the model. The real values never reach an external server.
The model reasons over the placeholders and replies as normal. Anuma then restores your real details locally, so the conversation reads exactly the way you'd expect — you see a natural chat, while the model never had access to the underlying data.
One setting, every model
Because redaction runs before the request leaves your device, it works the same way no matter which model you're talking to — closed-source or open-source, a single model or a full Council. It's a single toggle, available on every plan, and it stays out of your way: one setting, every model, always private.