Private · runs on a local model