NFR-3: Privacy

• Images are sent to a third-party API (Minimax). The user should be informed of this.
• The relay should strip EXIF metadata from images before sending (or ensure Minimax does not retain images).
• The cache is local-only (on the Mac running the relay) and not synced anywhere.
• A privacy notice should be shown on first use: “Image descriptions are generated by an AI service. Images are sent to Minimax for processing.”

NFR-4: Reliability

• If Minimax is down or rate-limited, the system degrades gracefully — images show “[Image — could not describe]” instead of crashing.
• If BlueBubbles attachment retrieval fails (e.g., file moved, permission denied), log the error and show the failure placeholder.
• The relay should retry failed API calls once after a 5-second delay.