What on-device means
The model runs on the user's hardware — in the browser or app — rather than on a server anyone else operates. The input is analysed where it was captured.
Why it is more private
No upload means no stored copy, no transfer to secure and no retention policy to write for it. Atelier, our own room visualiser, was built this way on purpose: 100% of its segmentation runs in the browser and no image ever leaves the device. Saved projects stay in the browser's local storage.
What it costs
A model small enough for a browser does narrower work than a large server-side one. Deciding which pixels are floor, wall or cabinet is bounded work on one image, which is why it runs well on-device; open-ended reasoning over lots of data usually does not.
When it fits
Photos of homes, documents and people are the obvious candidates, because they are the inputs customers are least comfortable uploading.