Privacy is enforced structurally in code, not just by policy: the KIRA audio ring buffer lives exclusively in volatile RAM, computes non-invertible physical spectral features in real time, and immediately zeroes out raw PCM samples. Neither KIRA nor the manufacturer can reconstruct spoken words, and zero audio packets traverse the network.