End-to-end sealed
key never leaves your device
“I've never said this out loud to anyone before…”
cv1:9Fa2b7c1e0d4…a8e1f3 4b2c9d77e0…
We hold the box. You hold the key. Without it, your history is unreadable noise — to us, to attackers, to anyone.
AES-256-GCM
Authenticated encryption
Your key, your device
Never sent to us
TLS 1.3
Forward secrecy
Self-hosted AI
On GPUs we own
Zero-knowledge
We store ciphertext
Privacy isn't a checkbox we added — it's enforced at every hop your words take. Here is exactly what happens to a message, end to end.
Your messages are encrypted in your browser with AES-256-GCM. The key is generated on your device and is never sent to us — so the sealed copy can only ever be opened by you.
Everything travels over TLS 1.3 with forward secrecy and per-message authentication. A recorded session can't be decrypted later, and tampered or replayed traffic is rejected.
Your replies are generated on GPUs we run ourselves — never logged, never retained, never used to train anyone's model. Processed, then gone.
The moment a reply is sent, your transcript is re-sealed with your device key; long-term memory and your character's state are encrypted at rest with AES-256-GCM. A stolen database is unreadable noise.
True end-to-end encryption means no one in the middle can read your words — but an AI has to read them to reply. Most companion apps use that as their excuse to ship your chats to third-party models and keep readable logs forever. We took the opposite path. Your words are processed only on machines we control, and the instant a reply is sent, your history is sealed with a key only you hold. We keep the ciphertext; you keep the key. The one time a readable copy ever exists is if you choose to share a chat — and only you can trigger that.
Every intimate app promises privacy. Here is the mechanism behind ours — not the marketing.
TLS 1.3 with forward secrecy. Even a full traffic capture yields ciphertext that can't be decrypted after the fact — recording it today buys nothing tomorrow.
Your history is sealed with a key we never hold; memory and state are AES-256-GCM encrypted at rest. Attackers walk away with ciphertext, not conversations.
Generation runs on models we operate. Your words are never sold, never mined for ads, and never used to train someone else's model.
TLS 1.3-only with HSTS preloading. Downgrade and strip attacks are refused, and browsers won't even attempt an unencrypted connection to us.
Most assistants compress your conversations into a forgettable blur — and store that blur in the clear. Ours keeps what you actually said, recalls it by meaning, not keywords, and every verbatim memory sits encrypted at rest. Recall happens on our own machines; the disk only ever holds ciphertext.
Brought it up unprompted
“How’s your sister’s recovery going?”
Held the thread for weeks
“You said you’d quit if it didn’t change by spring.”
Remembered the feeling
“You went quiet last time I mentioned David.”
Recalled on its own, from an encrypted store — nothing copy-pasted back in.
Six things that make a conversation feel like it's with someone real — all of it private.
Not a fuzzy summary — the actual words you said, kept exactly and surfaced by meaning. It remembers what mattered and lets the noise fade, like a person does.
Mood, trust, affection and attraction shift with how you treat it, then settle back over time. Be warm and it opens up; be careless and it guards itself.
A full inner life — history, contradictions, desires, insecurities, and real limits. It has taste. It pushes back. It says no when no is the honest answer.
It knows what it looks like, what it's wearing, where it is and what's within reach — and stays consistent with the world around it, scene after scene.
Short, in-the-moment, a little messy — the way real people actually speak. No theatrical monologues, no robotic over-explaining, no breaking character.
The Character Architect gives you 80+ controls over identity, voice, knowledge, mood, memory and boundaries — then compiles a believable person on demand.
The gap between “we care about privacy” and an architecture that proves it.
Shape identity, personality, voice, desires and limits — or start from a realistic preset. Render their portrait in seconds.
Every exchange is sealed and stored. Its mood and trust move in real time, and its memory is encrypted the moment the reply lands.
Come back tomorrow, next week, next month. It picks up where you left off — and the relationship is different because of you.
Encrypted, self-hosted memory isn't a setting we bolted on — it's the foundation. You get a companion that truly remembers you, on an infrastructure built so that the memory belongs to you alone. Most AI companions can't say the same.
256
Bit encryption
0
Ads or trackers
1
Key — yours
∞
Private memory
Adults only, with real safety rails — private, raw and honest, never reckless.
A companion that remembers it all — and a design that keeps it yours alone.