private · on-device