Secure AIYour details never leave
AI you can use on
confidential files.
Your files never leave your computer. Names, numbers and faces are taken out before your question reaches the AI.
Free, and there is no account to make.
Read on your device
Your files are opened here, not uploaded to a server.
We can't read it
Only your own devices hold the key. We store it and cannot open it.
Answers still make sense
Names are swapped for placeholders, then swapped back in the reply.
Emails1Phone numbers1Card numbers1Street addresses1Postcodes1Names1
One app, everywhere you work
- iPhone
- iPad
- Mac
- Windows
- Android
- Web
- API
For the work that cannot be pasted anywhere else.
Other assistants ask you to trust a privacy policy. This one takes the details out before anything is sent, so there is nothing left to trust us with.
- Law
Client files and disclosure bundles, read without the client's name leaving the building.
Privilege does not survive a paste into a chatbot.
- Healthcare
Letters, referrals and notes. The patient is hidden before you ask, and named again in the answer.
Patient data has a legal home, and it is not a model provider's logs.
- Finance
Statements, applications and payroll, with card and account numbers removed on your own machine.
The numbers that identify an account are the ones that drain it.
What happens before anything is sent.
Four things the app does by itself, on your computer, between you pressing send and the question reaching a model.
Names are swapped, then swapped back.
The model answers about a placeholder, so it never learns who anyone is. The real names are put back before you read the reply.
Marta KowalczykPERSON_1PERSON_1Marta KowalczykScans and photos are read here.
A photographed contract has no text to copy. The words are recognised on your own device — nothing is uploaded to read them.
3 pages read · 0 sent
Every send is written down.
You get a list of what was sent and what was removed first. It is kept on your device, for you — not a report we hold about you.
- 09:14 4 details hidden sent
- 09:22 1 face covered sent
- 09:31 nothing found sent
Files are locked before they are stored.
A file you save is encrypted on your own device first. What we keep has no filename and nothing readable in it.
tenancy-agreement.pdfa3f9…c012
Four screens, every device.
The same app on your phone, your laptop and the web. Your work follows you, and stays unreadable to us the whole way.
- Chat
Ask about the file in front of you without handing it over.
- History
Every conversation, encrypted to your devices only.
- Documents
Save the files you need, locked before they are stored.
- Privacy
A list of what was sent, and what was removed first.
The one screen nobody else has.
Every other assistant asks you to take its word for it. This one shows you the receipt: what was sent, what was removed, and when.
- 09:14Rent review — 4 details hiddennames, address
- 09:22Payslip photo — 1 face coveredface
- 09:31Invoice query — card number hiddencard
- 10:02Draft reply — nothing found—
Every plan is equally private.
Paying buys more storage, faster answers and better models — never more privacy. The free plan is a plan, not a trial.
Free
Everything you need to get started.
- Chat on iPhone, iPad, Mac and Windows
- PDFs, Word, Excel and more, read on your device
- Unlimited notes and calendar, encrypted to your devices
- Images, diagrams and web search
Plus
More room to do more.
- Everything in Free
- 5× the usage
- 20 GB Library
- PDF, Word, Excel, PowerPoint and CSV support
Pro
Room for a working day.
- Everything in Plus
- 16× the usage
- 100 GB Library
- Our most capable models
- ⭐ Most Popular
Ultra
The most private, and the most of everything.
- Everything in Pro
- Even we can’t read your messages
- 32× the usage
- 500 GB Library
Prices, currencies and the full list of what each plan includes are on the pricing page. Teams are billed per seat — see Business.
What happens when you press send.
Four steps. The second one is the whole product; the rest is an ordinary assistant doing ordinary things.
- 01
You write, or you attach
A question, a contract, a screenshot, a scan. PDFs, Word, Excel, PowerPoint and photos are all read on your own device.
- 02
The details are taken out before anything is sent
Card numbers, addresses, emails, phone numbers and people's names are found and covered. You see what was found and can cover anything else yourself.
- 03
The question goes out without you in it
The model gets your question and the document with the details blanked out. Names go as placeholders, so the answer can still point at the right person.
- 04
The answer comes back complete
The placeholders are swapped back on your device. You read a normal reply about real people. The model never saw one.
Questions people actually ask.
The ones that decide whether you can use this for real work. How it all works is written out in full on the security page.
What actually leaves my device?
Your question, and the text of any file you attached — with names, emails, phone numbers, addresses, card and account numbers taken out first. You see what was found before it goes. The files themselves are never uploaded; they are read on your own device.
Can you read my conversations?
No — and not because of a rule we set ourselves. The key is only ever given to your own devices, never to a browser tab, which is why history and documents live in the app. What we store is scrambled, and we could not unscramble it if we were asked to.
Which models answer?
Whichever is best for what you asked, from several providers. They get a question with no identity attached, so all they can learn about you is what the words alone would tell a stranger.
How is this different from ChatGPT or Claude?
They are better assistants and probably always will be — far more people and money go into them. The difference is what you are allowed to put in. A contract, a payslip, a medical letter or a client file can go in this one.
Does it catch everything?
Cards, accounts, emails, phone numbers and postcodes, yes — they have a recognisable shape. Names are harder, because a name looks like any other word. It is found by the label in front of it, which forms and records have and ordinary sentences do not. You always see what was found, so you can cover anything it missed before sending.
What does it cost?
There is a free plan, and it is a plan rather than a trial. Paying buys more room, faster answers and better models — never more privacy. There is no less-private version to sell.
Try it with something you would
never paste anywhere else.
Free to use. No account needed to start.
iPhone · iPad · Mac · Windows · Android · Web · API