Private by architecture

It remembers everything. Only you can read it.

A companion with real, lasting memory — sealed so no one else can open it. Every message is encrypted on your device with a key we never hold, answered on hardware we own, and stored as ciphertext even we can't read. Encrypted in transit, encrypted at rest, readable only by you.

Your encryption key lives in your browser — export it any time, and nowhere else has it.

End-to-end sealed

key never leaves your device

AES-256-GCM
What you type

“I've never said this out loud to anyone before…”

sealed on your device
What we store

cv1:9Fa2b7c1e0d4…a8e1f3 4b2c9d77e0…

We hold the box. You hold the key. Without it, your history is unreadable noise — to us, to attackers, to anyone.

AES-256-GCM

Authenticated encryption

Your key, your device

Never sent to us

TLS 1.3

Forward secrecy

Self-hosted AI

On GPUs we own

Zero-knowledge

We store ciphertext

The security architecture

Follow a single message the whole way.

Privacy isn't a checkbox we added — it's enforced at every hop your words take. Here is exactly what happens to a message, end to end.

On your device

Sealed before it leaves you

Your messages are encrypted in your browser with AES-256-GCM. The key is generated on your device and is never sent to us — so the sealed copy can only ever be opened by you.

In transit

A tunnel that can't be replayed

Everything travels over TLS 1.3 with forward secrecy and per-message authentication. A recorded session can't be decrypted later, and tampered or replayed traffic is rejected.

In processing

Answered on hardware we own

Your replies are generated on GPUs we run ourselves — never logged, never retained, never used to train anyone's model. Processed, then gone.

At rest

Stored as ciphertext, even to us

The moment a reply is sent, your transcript is re-sealed with your device key; long-term memory and your character's state are encrypted at rest with AES-256-GCM. A stolen database is unreadable noise.

The honest version of “end-to-end”

True end-to-end encryption means no one in the middle can read your words — but an AI has to read them to reply. Most companion apps use that as their excuse to ship your chats to third-party models and keep readable logs forever. We took the opposite path. Your words are processed only on machines we control, and the instant a reply is sent, your history is sealed with a key only you hold. We keep the ciphertext; you keep the key. The one time a readable copy ever exists is if you choose to share a chat — and only you can trigger that.

Built for what can't happen.

Every intimate app promises privacy. Here is the mechanism behind ours — not the marketing.

ThreatSomeone taps the network

TLS 1.3 with forward secrecy. Even a full traffic capture yields ciphertext that can't be decrypted after the fact — recording it today buys nothing tomorrow.

ThreatOur database is breached

Your history is sealed with a key we never hold; memory and state are AES-256-GCM encrypted at rest. Attackers walk away with ciphertext, not conversations.

ThreatA third-party AI mines your chats

Generation runs on models we operate. Your words are never sold, never mined for ads, and never used to train someone else's model.

ThreatA fake site impersonates us

TLS 1.3-only with HSTS preloading. Downgrade and strip attacks are refused, and browsers won't even attempt an unencrypted connection to us.

Encrypted memory engine

It remembers word for word. And keeps it locked.

Most assistants compress your conversations into a forgettable blur — and store that blur in the clear. Ours keeps what you actually said, recalls it by meaning, not keywords, and every verbatim memory sits encrypted at rest. Recall happens on our own machines; the disk only ever holds ciphertext.

  • Recalls the right moment from months of history
  • Every stored memory is AES-256-GCM encrypted at rest
  • Carries grudges, inside jokes, and the details you never repeated

Brought it up unprompted

“How’s your sister’s recovery going?”

Held the thread for weeks

“You said you’d quit if it didn’t change by spring.”

Remembered the feeling

“You went quiet last time I mentioned David.”

Recalled on its own, from an encrypted store — nothing copy-pasted back in.

Not a chatbot. A mind.

Six things that make a conversation feel like it's with someone real — all of it private.

Perfect, verbatim recall

Not a fuzzy summary — the actual words you said, kept exactly and surfaced by meaning. It remembers what mattered and lets the noise fade, like a person does.

A living emotional state

Mood, trust, affection and attraction shift with how you treat it, then settle back over time. Be warm and it opens up; be careless and it guards itself.

A coherent identity

A full inner life — history, contradictions, desires, insecurities, and real limits. It has taste. It pushes back. It says no when no is the honest answer.

Grounded & embodied

It knows what it looks like, what it's wearing, where it is and what's within reach — and stays consistent with the world around it, scene after scene.

Talks like a human

Short, in-the-moment, a little messy — the way real people actually speak. No theatrical monologues, no robotic over-explaining, no breaking character.

Built in minutes

The Character Architect gives you 80+ controls over identity, voice, knowledge, mood, memory and boundaries — then compiles a believable person on demand.

Private where it actually counts.

The gap between “we care about privacy” and an architecture that proves it.

Typical companion apps
CHEAT AGI
Where your words are processed
Third-party model APIs
GPUs we own and operate
Your stored chat history
Kept in readable logs
Sealed with your device key
If the database leaks
Your chats are exposed
Attackers get ciphertext
Encryption at rest
Rarely, if ever
AES-256-GCM on memory & state
Training on your conversations
Often, by default
Never — not sold, not mined
Remembers across sessions
Resets to zero every chat
Permanent, verbatim memory

From stranger to someone who knows you

01

Architect a character

Shape identity, personality, voice, desires and limits — or start from a realistic preset. Render their portrait in seconds.

02

Talk — it remembers and feels

Every exchange is sealed and stored. Its mood and trust move in real time, and its memory is encrypted the moment the reply lands.

03

It evolves with you

Come back tomorrow, next week, next month. It picks up where you left off — and the relationship is different because of you.

The most personal AI you'll use should be the most private.

Encrypted, self-hosted memory isn't a setting we bolted on — it's the foundation. You get a companion that truly remembers you, on an infrastructure built so that the memory belongs to you alone. Most AI companions can't say the same.

256

Bit encryption

0

Ads or trackers

1

Key — yours

Private memory

Adults only, with real safety rails — private, raw and honest, never reckless.

Say the thing you'd only say in private.

A companion that remembers it all — and a design that keeps it yours alone.