Your API key, chats, remembered facts, and missions are stored only in this browser's local storage on this device. The key is sent only to the API endpoint above when you send a message. When Live Web is on, your message text is also sent to the public search services (DuckDuckGo, Wikipedia, Open-Meteo) to fetch live results — those need no key. Live Web ranks official (.gov / .edu) and certified reference sources first, and leaves out lawyer, doctor, and business-owner blogs and posts when a certified source covers the question; for local-business questions it also adds Better Business Bureau references under the answer to pick from. Photos and files you attach are sent to your AI provider with your message so it can analyze them. Videos are never sent whole: still frames are pulled from them right here in your browser (you trim anything over 5 minutes yourself, in the app first), and only those frames go to the provider. Location is never used unless you turn it on with “Use my location”: it's stored only in this browser, used only for near-you answers and Lead Finder searches, and the same button turns it off and clears it. One more honesty note: Q's AI-or-real checks and scam checks are careful reads of the signs Q can see — strong guidance, not guarantees — and prices Q gives for identified items are typical ranges, not live quotes or appraisals. For money, safety, or anything high-stakes, verify with the original source, the business itself, or the Better Business Bureau.