Limn desktop — privacy-first text-to-image, bring your own provider.
Unsigned builds: on macOS right-click the app > Open the first
time (or remove quarantine: xattr -dr com.apple.quarantine /Applications/Limn.app);
on Windows choose "More info > Run anyway".
First launch downloads a private Python runtime (~1 min), then
configure your provider in Settings. Nothing leaves your machine
except generation requests to the provider you set.