No Ilfirin cloud, no account, no database. Your records stay in files you own.

Ilfirin installs on your own computer and reads your wearable, food, and bloodwork data from local files. There is no Ilfirin server in the middle and nothing sold. One path leaves the machine, and we name it here rather than bury it: during a chat, the readings Claude needs pass through Anthropic — a model cannot reason over data it never receives. privacy is a property of the build, not a pledge to take on faith

No Ilfirin server No account Your data, your files Three privacy modes

Coaching, not medical care — Ilfirin reasons from cited research; it is not a clinician and not a substitute for one. The name is the long view, not a claim on your lifespan. Ilfirin runs on your own computer, reasoned by Claude (a frontier AI model) through the Claude plan you already pay for — Claude itself does not run on your machine. Privacy by architecture: no Ilfirin cloud, account, or database.

01 What happens to your data

It runs where your data already is.

Most health apps copy your records to a server you will never see. Ilfirin does the opposite: it installs on your machine and reads the data locally. Here is exactly what stays put — and the one slice that moves, only when you ask a question.

Stays in files you ownlocal

Wearable history — sleep, heart rate, steps, HRV, workouts on disk

Food logs and the nutrition catalog on disk

Bloodwork PDFs and parsed lab values on disk

Profile, plans, reviews, and the audit log on disk

Passes through Anthropicin chat

The messages you type, plus the specific tool results that answer them per chat

That is how Claude reads your numbers to coach you required

On Pro/Max, Anthropic does not train on this by default no training

Retained briefly for trust & safety, then deleted then gone

The honest version. Nothing is uploaded in the background, and there is no Ilfirin server between you and Claude. Data flows out only in the moment you ask a question — and only the slice that question needs. The two narrower modes below shrink or close even that path. Source, unspun: Anthropic's privacy policy.

02 You set the dial

Three modes. A deliberate trade between detail and disclosure.

The same coach at three levels of disclosure. It is a field in your profile, not a support ticket — switch any time. Standard is the default because most people want the most granular coaching.

Ilfirin privacy modes — what Claude sees, what leaves the machine, the trade-off.
Mode	What Claude sees	What leaves your machine	The trade-off
Standard default	Exact values, in full. ApoB 78 · RHR 51 · 156 lb	Your message plus the tool results it needs, during the chat.	Best AI quality; the most granular coaching.
Aggregated	Summaries, not raw numbers. cardio markers in range · stable	Only the summary — raw values stay local and are never sent.	Still useful coaching; less precise where a raw number would help.
Local-only	Nothing reaches Anthropic at all.	Nothing leaves your machine.	Absolute privacy — everything stays on your machine.

If you would rather not send raw numbers, aggregated keeps them local and returns summaries. If you want zero data through Anthropic, local-only never lets a thing leave. The default favors coaching; the controls favor you, and you can change your mind.

03 Finer control

A log you can actually read.

Modes set the broad dial. Underneath them, a log lets you check — at any time — exactly what was shared.

local audit log

Every data access, written down.

Each tool call is logged to a plain audit.jsonl file on your machine — which tool ran, the argument keys (never the values), and the shape of what it returned. In aggregated mode the entry is stamped to show the filter ran. Ask Ilfirin to show it any time; you control how long it is kept.

tool: get_today_readiness
result_shape: color · components · note · privacy
privacy: aggregated filter applied
timestamp: 2026-05-14T08:32:11-07:00

04 The part most products won't state

How the connection actually works — described accurately.

We would rather lose you to the truth than keep you with a claim that does not hold up. So here is the chat connection, worded the way a careful person would want it worded to them.

To let Claude reach your machine, the connection runs over standard TLS through a Cloudflare tunnel. That TLS is terminated at Cloudflare's edge — the traffic is decrypted there before it continues. So it is not end-to-end encrypted, and we will never call it that. It is an ordinary reverse-proxy arrangement, and a common one.

Transport · the accurate wording

Standard TLS, terminated at the edge — not a sealed private channel.

Claude Cloudflare edge · TLS terminates here Your machine

The honest takeaway: your records stay on your computer, but the chat path is ordinary web transport, not a private tunnel. If that distinction matters to you, local-only mode keeps everything on your machine and sends nothing.

05 Lines we don't cross

No account. No database. Nothing sold.

Because Ilfirin runs on your machine and we run no service in the middle, a whole class of privacy problems simply does not exist here.

No login, no profile. You do not create an Ilfirin account, so there is no credential to breach and no identity to track.
No copy of your data. There is no central store of health records on our side — nothing to subpoena, leak, or sell.
Never sold or shared. We do not run an ad business or a data brokerage. There is no incentive to monetize you.
No tracking. The dashboard is local and read-only; this site ships no third-party trackers.

Honest about what this is.
beta — an early, invite-based beta; not a finished product, and not pretending to be.
not e2e — the chat path is standard TLS terminated at Cloudflare's edge, not end-to-end encryption. We say so on purpose.
not medical — coaching grounded in cited research, not medical advice, and not a substitute for your clinician.
literary — "Ilfirin" is a quiet old word for the long view. No life-extension or anti-aging promise.

Request access

Keep the data. Get the coach.

Tell us about your devices and your setup. We provision your own instance and send a personalized installer — it runs on your machine, with the privacy mode set wherever you are comfortable. Access is limited while we keep the beta small.

Request access See how it works

No new subscription — Ilfirin runs on the Claude plan you already have, so "no new subscription," not "free": you still need a Claude plan and an always-on computer. An early, invite-based beta. Coaching, not medical care.