Yours, on a computer of its own.
Your memory lives in a palace of your own. It does not live inside Meta, Anthropic or OpenAI. Here is what that means, and where it stops.
Only your passkey opens it.
Your Face ID or fingerprint (a passkey) opens your palace. There is no password to steal. Lock it once, in Settings → Safety, and from then on nobody else can open it. Not us, not Google. Lose every passkey and your recovery phrase, and nobody can open it, not even us.
An assistant reads only what you let it.
Each assistant you connect asks first, on your palace, and you tick what it may do. Your palace shows when each one last read and saved, and how often today. Disconnect one from Connections and it stops at once.
Nothing goes out as you without your yes.
Anything that sends or shares as you puts a card on Home first, unless you tell it not to ask in Settings. Throwing things away for good always asks. Updates wait for your yes too, unless you let them install on their own. Everything else comes with Undo.
A little honesty.
The AI that answers inside your palace sees your question and the memory it needs. The included brain goes through Venice, not under your name, and is not used for training. We rent the computer your palace runs on. Whoever controls those machines could change what runs and wait for you to open it again, so an unexpected restart is worth knowing about.
What stays on this website.
Your sign-in, your palace's name and address, whether it is awake and locked, your setup note, and counts of how much it is used, never what it holds. If you join the list, your name, email and your answer stay here for the maker. Your memory and messages do not.
Yours to take away.
Read your memory, download all of it, or empty your palace, any time. Nothing of it stays with us.
Free and invite-only while we build it. I have a code