Reference · 5 min read
Privacy and security
Learn what stays local, what is sent to fal.ai, and how ZenDreamer protects credentials and diagnostics.
Local-first project data
- Project structure, timeline edits, storyboard data, and local job history live in the project.
- Imported original media remains external by default; generated output is downloaded and managed locally.
- Local editing and export of already-downloaded media do not require fal.ai.
License checks
ZenDreamer contacts vibeme.studio during activation and normally when the app starts. The service stores a one-way hash of the license key, a one-way hash of a randomly created device identifier, the computer name, app version, license state, and activation or last-check timestamps. It does not receive project files, prompts, media, timeline data, or your fal.ai key.
A signed authorization is encrypted on the computer through the operating system's secure storage. It allows up to seven days of offline use and cannot be edited into a longer or different license without invalidating its signature.
Data sent for AI work
When you start an AI operation, the selected prompt, parameters, and required source or reference media are sent to fal.ai and the chosen model provider. Review the provider's own terms, retention policy, and commercial-use conditions before submitting sensitive material.
Credential handling
- The fal.ai key is accepted only by the privileged desktop process.
- On Windows, persistent credentials are encrypted through the operating system's DPAPI-backed secure storage.
- The full key is not returned to the interface, project, browser storage, logs, or diagnostics.
- Disconnect removes the locally stored credential but does not delete the remote fal.ai account or key.
Diagnostics and telemetry
Current beta diagnostics remain local. Structured logs redact credentials, prompts, scripts, media paths, local URIs, and media metadata while retaining normalized error categories and correlation IDs. Remote crash uploading and product telemetry are disabled in the current build.