OGAD's privacy boundary depends on the chosen model: a remote model may receive the note text needed to answer, while a local model keeps inference on the local machine; but even if OGAD itself does not upload anything, if the user syncs the vault via iCloud, OneDrive or Obsidian Sync, those cloud services still hold a copy of the notes.