AiiB

Platforms and security

Your data stays on your computer.It leaves only when you use AI.

AiiB keeps your documents off any server of ours. This page explains where it runs, what it stores, and what leaves your computer, using only facts we have verified.

0servers of ours
0accounts · analytics
1database file
HTTPSto AI providers

Overview

What stays on your computer, and what leaves

The dashed frame is your computer. Your documents live in the database inside it. Only two lines go out: when you use AI, and store purchases and updates. There is no line to a server of ours.

Your computerAiiB (inside the sandbox on Mac)App UIslides, documents, notes, examsAI gateredaction tokens, edit scopeDatabaseone SQLite fileHelper processlistens on 127.0.0.1 onlyCredential storeKeychain / Credential ManagerExported files.pptx, PDF, .deck.jsonAnalytics, ads, crash reports: noneAI providerthe one you choseApp Store /Microsoft StoreOur serversthere are noneHTTPSyour keyonly whenyou use AIpurchases,updatesnothingsent
AiiB at a glance: inside and outside your computerTap to enlarge

Requirements

Where it runs

Mac
macOS 13 or later, Apple silicon and Intel. Distributed through the Mac App Store
Windows
Windows 10 (1809 or later) / Windows 11, 64-bit. Distributed through the Microsoft Store (MSIX, signed by the Store). Direct download later
PowerPoint add-in (web)
PowerPoint in Microsoft 365 on Windows, Mac and the web. PowerPointApi 1.5 or later
PowerPoint add-in (.ppam)
Desktop PowerPoint on Windows. Bundled with AiiB for Windows
Network
Needed only for AI features and subscription purchases. Everything else works offline
Languages
App UI in Japanese, English and Chinese (Simplified). Decks in Japanese, English, Chinese, Korean and German

Data

Where data lives

Decks, notes, documents, exams, projects and settings are stored as one database file (SQLite) in the app’s own area on your computer. We cannot access this file.

  • Not in the cloud

    There is no server of ours and no sync service.

  • Export and import

    Export to a file from Settings › Database and import it on another Mac or Windows PC.

  • Deletion

    Deleting the app deletes the data on your computer. Export first anything you want to keep.

  • Backups

    Backing up your computer (Time Machine and so on) and keeping exported files are up to you.

  • Images

    Pasted images are compressed inside the app (1600 px long edge) and never sent anywhere.

  • Standard formats

    PowerPoint, PDF, Word, Markdown, LaTeX, PNG/SVG and deck data (JSON). No lock-in.

Network

What leaves your computer

AiiB talks to the outside only in these cases. The matrix below shows where each kind of data goes.

Where each kind of data goes
Your computerAI providerUsApple / Microsoft
Document and note content●stored▲only what you send to AI——
Redacted words●original kept—sent as tokens——
API keys●credential store▲to authenticate with that provider——
Exported files●where you save them———
Purchases and payment——▲aggregated, not identifying●handled by the store
Usage, crashes, ad IDs—not collected———
●Yes▲Conditional—No
When you use AI
The content you choose is sent directly to the AI provider you set up, with your own API key, over HTTPS. Never through a server of ours
Subscriptions
Handled by Apple (App Store) or Microsoft (Microsoft Store). We never receive your name, payment details, Apple ID or Microsoft account
Updates
Delivered through each store’s update mechanism
Anything else
Nothing. No analytics, no ads, no crash reporting

AI

AI and your data

AI is optional. Templates, editing, export, notes, documents and exams all work without it. When you do ask AI, this is what happens; the gate inside AiiB replaces redactions and checks the scope.

YouAiiB UIAiiB gateAI providerDatabase1“Fix this slide”2Content and the allowed scope3Replace redacted words with tokens4Tokenized content (HTTPS, your key)5Proposed edit (with tokens)6Refuse writes outside scope; restore originals7Change proposal8Compare with the current deck9Accept (reject keeps nothing)10Save (on your computer only)The AI never receives the original redacted words
What happens when you ask AI to editTap to enlarge
  • Your key, direct

    Content goes straight to the provider you chose: Anthropic, OpenAI, Google and others. The app never charges for AI.

  • Provider terms apply

    What you send is governed by each provider’s terms and privacy policy. Decide before sending anything sensitive.

  • Redactions stay hidden

    When AI edits slides, redacted words are replaced with tokens before sending and restored before saving. Anything not redacted is sent.

  • Scope is enforced

    Ask about “this slide” and no other slide is written. Writes outside the scope are refused in code.

  • Nothing lands until you accept

    Deck-wide changes stay proposals until you compare and accept. A single-slide change undoes in one step.

  • Local models

    The directly distributed version can connect to a model running on your own computer. Support in the App Store version comes in a later update.

App

How the app is protected

Protection is layered. If an outer layer fails, the inner layers still hold.

DistributionStore review and signing (Apple / Microsoft)OSSandbox (Mac), credential storeAppEdit-scope gate, sanitized SVG/HTML, helper on 127.0.0.1 onlyDataRedaction, one local file, sent out only when you use AIYouexports and backups
Layers of protectionTap to enlarge
  • Sandbox (Mac App Store)

    Runs in the macOS sandbox with six entitlements only: read/write files you choose, read/write Downloads, outgoing network (AI providers), a local listener (the helper below), printing (PDF export), and the sandbox itself.

  • The helper stays on your computer

    A helper process for export and AI editing runs in the same sandbox and listens only on 127.0.0.1. It cannot be reached from other computers, and it checks who is calling.

  • No launching other programs

    The Mac App Store version does not include features that launch other programs on your computer.

  • Keys

    API keys are stored in the macOS Keychain or Windows Credential Manager and never leave the app.

  • Sanitized input

    Figures (SVG) and document HTML are stripped of dangerous parts (scripts, event attributes, external URLs and so on) before they are drawn.

  • Signing and distribution

    Signed by Apple on Mac and by the Microsoft Store on Windows. Only builds that pass store review reach you.

PowerPoint

PowerPoint add-in

Same PCPowerPointWeb add-inposition and size of selected shapes.ppam (Windows)insert, send, alignAiiBthe open appinsert / sendOutside serversnothing sent
PowerPoint add-in boundariesTap to enlarge
  • The web add-in works on its own

    The alignment tools run entirely inside PowerPoint. Nothing is sent to an outside server or to AiiB. It is hosted at https://atobhundred.com/aib/addin/.

  • Only the shapes you select

    The web add-in reads and writes the position and size of the shapes you select.

  • The .ppam talks only to AiiB on the same PC

    “Insert from AiiB” and “Send to AiiB” in the Windows .ppam exchange data only with AiiB open on the same PC.

Privacy

Privacy

  • Nothing collected

    We do not collect personal information through the app, and there are no accounts. The store privacy label is “Data Not Collected”.

  • Sales information

    We receive only aggregated sales information that does not identify you.

  • Children

    The app is not directed at children under 13, and we do not knowingly collect their information.

  • Full text

    Read the full privacy policy and terms from the links below.

Companies

For companies (in preparation)

We are preparing deployment inside your own cloud, a Teams tab, and connection from Copilot Studio. Contact us about requirements.

  • Certifications

    We do not currently hold third-party certifications such as ISO/IEC 27001.

  • Contact

    support@atobhundred.com

Reporting

Reporting security issues

If you find a security problem, please email support@atobhundred.com with “Security” in the subject so we can prioritize it. We appreciate time to fix it before public disclosure.