๐Ÿ›ก๏ธ 100% On-Device Privacy ยท Native macOS, Windows & Linux Apps Live

Censor private data & shrink docs to fit into any AI prompt

LoyalCloak converts messy, bloated documents (PDF, DOCX, HTML, EPUB, spreadsheets) into clean, token-optimized Markdown โ€” with on-device PII scrubbing, header/footer stripping, and real-time token analytics. All powered by a native Rust engine that never lets your data leave the device.

Native macOS, Windows & Linux apps live ยท Web App available ยท iOS on App Store ยท Android on Google Play

โœ“ Zero Cloud
โœ“ No Telemetry
โœ“ RAM-Only Processing
โœ“ Native Rust Engine
โœ“ Works Offline
Interactive Demo

Test On-Device Sanitization Right Now

Type sensitive data below. Watch emails, phones, cards, and extra whitespace disappear in real time โ€” 100% locally in your browser.

Raw Document Input
Sanitized Output -0% tokens
Raw Tokens 0
Sanitized Tokens 0
Features

Everything you need to prep documents for AI

From PII redaction to token optimization โ€” all running locally on your device.

๐Ÿง 

AI Deep Scan (Local NER)

On-device DistilBERT transformer model (int8 via ONNX Runtime) detects and censors person names across unstructured text with zero cloud API calls (Pro).

๐Ÿ›ก๏ธ

Automated PII Censorship

Instantly redact emails, phone numbers, NDC drug codes, and ICD-10 diagnosis codes. Pro adds credit cards (Luhn-verified), SSNs, IBAN, IPv4/IPv6, API keys, and custom regex rules with live preview.

๐Ÿ“š

Local Pattern Library

Checksum-validated detectors for health, legal, and financial IDs โ€” NPI, DEA, MRNs, court dockets, account numbers. Toggle each pattern on or off and opt into FRCP 5.2 partial masking that keeps only the last four digits (Pro).

๐Ÿงพ

Privacy Audit Report

Export a timestamped summary of exactly what was found and removed โ€” generated on-device and exportable as PDF or Markdown, with metadata-only, masked-preview, or full-values detail levels (Pro).

๐ŸŽญ

Reversible Pseudonyms

Replace names and private data with realistic pseudonyms. Paste the AI response back into LoyalCloak to restore original values on-device with 1 tap (Pro).

โšก

Token Optimization

On-device tiktoken BPE counting for ChatGPT, Claude, and universal estimation. Collapse whitespace, repair line breaks, and strip soft hyphens to cut token size by up to 50%.

๐Ÿ“„

Multi-Format & Spreadsheets

Process PDF, DOCX, EPUB, HTML, CSV/Excel spreadsheets, plain text, and images via hardware-accelerated on-device OCR. No uploads, no conversion servers.

๐Ÿงฉ

Auto-Chunking & XML Wrappers

Split long documents on section boundaries with sequential <part_N_of_M> tags and encapsulate in structured <context> prompt wrappers (Pro).

๐Ÿ““

Split for NotebookLM

One-tap export that splits sanitized documents into clean Markdown sources under NotebookLM's 500k-words-per-source limit โ€” or merges whole batch files together to stay under its 50-sources-per-notebook cap. Free within tier page limits.

โšก Native Desktop Apps (v0.6.0)

Unmatched Speed & Privacy on Your Desktop

LoyalCloak is now available as a standalone native application for macOS, Windows, and Linux. Powered by a native Rust engine and on-device ONNX runtime, process entire binders of PDFs, spreadsheets, and documents with zero cloud latency.

Global Hotkey: Shift + Cmd / Ctrl + S Instant Sanitize
LoyalCloak Desktop โ€” 100% Offline
๐Ÿš€ Native Features โœ“ 100% Local FFI
  • โœ“ Instant Sanitize: Capture selection from any app & paste back
  • โœ“ AI Deep Scan: Local DistilBERT NER via ONNX Runtime
  • โœ“ Drag & Drop: PDF, DOCX, CSV/Excel, EPUB, OCR
  • โœ“ Full Keyboard Navigation: Ctrl+O, Ctrl+S, Ctrl+B
$ doc_sanitizer --offline --zero-cloud
[Engine] Native Rust FFI initialized. 0 network calls permitted.
How it works

Three steps to a cleaner prompt

Your data never leaves your device at any point in the process.

1

Import

Share a PDF, DOCX, spreadsheet, EPUB, HTML, or image from any app โ€” or open a file directly.

2

Sanitize

PII is scrubbed, formatting is normalized, and tokens are counted โ€” all in RAM on your device.

3

Paste into AI

Copy clean, token-optimized Markdown and paste it into ChatGPT, Claude, DeepSeek, or NotebookLM.

๐Ÿ”’

Your data never leaves your device

LoyalCloak was built around a single non-negotiable principle: your document data stays on your device. All parsing, regex scrubbing, PII redaction, and token optimization execute 100% locally in transient RAM using a high-performance native Rust engine. Zero network calls, zero tracking, zero cloud telemetry.

Pricing

Simple, honest pricing

Start free. Upgrade when you need more power.

Free

$0

Forever

  • 5 files per day
  • Up to 15 pages per file
  • Header / footer stripping
  • Email, phone, NDC & ICD-10 scrubbing
  • On-device token counting
  • NotebookLM export (within page limits)
  • No AI Deep Scan (person names)
  • No reversible pseudonyms
  • No auto-chunking & custom regex
Try Web App Free
Most Popular

Pro

$14.99/yr

or $29.99 lifetime

  • Unlimited files & pages
  • AI Deep Scan (on-device person-name NER)
  • Reversible pseudonyms & 1-tap restore map
  • Deep PII redaction (cards, SSN, IBAN, IPv4/IPv6, secrets)
  • Pattern Library: NPI, DEA, MRNs, dockets, account numbers + FRCP 5.2 partial masking
  • Privacy Audit Report (PDF / Markdown export)
  • Custom regex rules with live preview
  • Smart auto-chunking & XML prompt wrappers
  • Batch document processing (up to 60 files)
  • Split & merge for NotebookLM on unlimited-size documents
Get Started on Web

๐Ÿ“ฑ The LoyalCloak mobile apps are now live on the App Store and Google Play.

Frequently Asked Questions

Everything You Need to Know

Learn how LoyalCloak sanitizes confidential documents and fits them into AI prompts with 100% on-device privacy.

How does LoyalCloak protect private data?

All document parsing, regex scrubbing, PII redaction, on-device ML inference, and token counting execute 100% locally in transient RAM on your device using a high-performance native Rust core. No text or metadata is ever sent to external cloud servers or telemetry endpoints.

What is AI Deep Scan and how does it detect person names?

AI Deep Scan uses an embedded, quantized int8 DistilBERT Named Entity Recognition (NER) model running 100% on-device via ONNX Runtime. It detects full and partial person names across unstructured documents locally without communicating with any cloud API.

How does it fit long documents into AI prompts?

LoyalCloak strips repeated headers, footers, boilerplate disclaimers, and unnecessary whitespace. It calculates exact BPE tokens (tiktoken cl100k_base / o200k_base and Claude models) and auto-chunks documents along heading boundaries with numbered prompt labels.

What document formats can I sanitize?

LoyalCloak parses PDF, Microsoft Word (DOCX), Excel / CSV spreadsheets, EPUB eBooks, HTML web pages, plain text (TXT, MD), and scanned documents or images via hardware-accelerated on-device OCR.

What kinds of PII are redacted?

The Free tier redacts email addresses, phone numbers, FDA NDC drug codes, and ICD-10 diagnosis codes. The Pro tier adds AI Deep Scan person-name NER, Luhn-verified credit cards, Social Security Numbers (SSN), IBAN accounts, IPv4/IPv6 addresses, API keys & secrets, national IDs, custom regex rules, and the Pattern Library: checksum-validated NPI and DEA numbers, medical record numbers, court docket numbers, and financial account numbers โ€” with optional FRCP 5.2 partial masking that keeps only the last four digits.

What is the Privacy Audit Report?

A timestamped, on-device summary of everything LoyalCloak found and removed in a document โ€” the active profile, detectors that ran, per-type counts, and token counts. You choose the detail level (metadata only, masked previews, or full values) and export it as PDF or Markdown. It is generated entirely on your device and never uploaded.

What is reversible pseudonymization?

Reversible redaction replaces real entities with realistic synthetic pseudonyms before querying AI models. When the AI returns an answer, you can paste it back to restore the original confidential values locally on your device.

Is LoyalCloak free?

Yes, LoyalCloak offers a forever-free tier with up to 5 files per day and 15 pages per document. Pro access ($14.99/yr or $29.99 lifetime) unlocks unlimited files, AI Deep Scan, deep PII, custom regex rules, batching, and auto-chunking.

๐ŸŒ

Web App โ€” Now Live

LoyalCloak is now available in your browser. Same 100% on-device privacy, PII scrubbing, and token optimization โ€” with no data ever leaving your browser. Supports PDF, DOCX, CSV/Excel, HTML, EPUB, plain text, and scanned documents via built-in OCR.

Launch Web App Download Desktop App (.dmg, .exe, .AppImage, .deb, .rpm)