The privacy model in full
This page is a stub. The full guide is written against the shipped app version and is on its way.
The provable version of the sovereignty claim, what runs where, what the network tab shows, and the one optional exception, exchange sync through the relay.
The full guide lands with the documentation pass for the current app version. Until then the app itself is the best reference, every screen explains what it is doing.