PrivacyArchitecture

Checking files and sites without collecting your browsing

How TotalHeal decides what is safe on your device first, and the narrow set of facts that ever leave it.

TotalHeal engineering1 min read

The problem

Protection software needs to know what you open in order to protect you. Done carelessly, that becomes a record of everything a person reads, downloads and visits. TotalHeal is designed so that protection never requires a browsing history.

Local first

Files, downloads and sites are checked on the device first, against signed threat definitions and behaviour rules that run locally in milliseconds. Protection keeps working with no connection at all.

What leaves the device

When a local check is not conclusive, TotalHeal asks its cloud reputation service about a single item. The guarantee is narrow and specific:

  • Only the site name (not the full page address) or the file fingerprint (a SHA-256 hash, not the file) is sent.
  • Your browsing history and your files’ contents never leave the device.
  • The one exception is a suspicious file you choose to send for cloud analysis on a paid plan. Its bytes are analysed and not stored; we keep the fingerprint and the verdict.
ItemStays on the deviceMay be sent for reputation
Web page you visitFull address, page content, historySite name only
Downloaded fileFile contents, file name, folderSHA-256 fingerprint
Suspicious file (your choice, paid plans)—File for analysis; not stored
What can leave a device during a reputation check.

Families

The family dashboard is built on the same rule. Adults see only each other’s protection status. Parents receive child-safety alerts without paths, file names or hashes. Everyone can see exactly what others can see about them.

Where data lives

Account, licence and device data is stored on servers in India and processed under India’s Digital Personal Data Protection Act, 2023. Read the privacy policy.

All technical papers