How it worksComparisonHardwareYour data never leaves your roomA machine in your home. A door only you can open.
It reads the world's original sources — and sends nothing of yours outside.S E E H O W I T W O R K S01 / HOW IT WORKSOne place on the whole chain holds your thingsYour phone isn't its brain — it's a screen. What you say leaves the phone already encrypted,
passes through a relay that only forwards, and reaches the machine in your home. The answer is generated there,
encrypted, and sent back the same way.The relay moves millions of messages a day. It holds ciphertext only. It has no key, and it stores none.The machine in your homeAgent, memory, files, conversation history — all on that machine. Not in a cloud, not tied to an account. Unplug it and the outside world has nothing.Your phone is just a screenNeither the web app nor the mobile app stores your conversations. Replace the phone, reinstall, lose it — as long as the machine lives, your things live.The relay only carries envelopesIt keeps a long-lived connection and forwards sealed envelopes. It can see that a letter was sent. It cannot see what's inside.Keys live only on your two devicesKeys are generated on your own phone during pairing. Only your phone and your home machine hold them. No server copy, and no copy we can open. Lose the recovery code and it is genuinely gone.It can go out. You don't go out.The machine reads public sources for you — reports, papers, regulatory filings, earnings. What it brings back stays on your machine. Outward is fetch; inward is nothing. That direction is the whole design.02 / DATA PATHThe same sentence takes two completely different roadsLeft is the Confidential Secretary. Right is almost every online AI assistant on the market — whatever it's called, the structure is the same: your words must enter someone else's data center before they can become an answer.Confidential SecretaryE2E encryptedCloud AssistantPlaintext in transitS I M I L A R P R O D U C T S · A R C H I T E C T U R E O N L YThey are all well built, and all of them encrypt traffic. There is exactly one difference: who holds the key.
They encrypt the road. We encrypt the road — and make sure you are the only one holding the key.Logos above are used solely to illustrate architectural differences. No affiliation or partnership is implied, and no judgment on their security is made.a lock only you can openreadable by the servicea relay that keeps nothingYour phonejust a screenyour exact wordsciphertextplaintextRelayforwards only, sees nothingPhonePhoneThe vendor's data centerYour machine at homeagent · memory · files · historyagent · memory · the key, all hereThe vendor's cloudStoreTrainOperateyour words become data herekept, read, invokedThe relay handles ciphertext only. Operators, staff, data centers — none of them can read it. Exactly one place holds your data: your own home.This isn't an accusation. It's structure: to answer you, they must understand you. And understanding means someone looked.03 / ONE TABLE"Is it safe" is really seven concrete questionsCloud assistantConfidential SecretaryWhere your words are storedVendor servers, across regionsOnly on the machine in your homeWho can read them in transitThe platform can decrypt; ops can seeNo one. Even the relay holds ciphertextUsed for trainingDepends on the terms — and terms changeNever. It never left your houseService shuts down / account bannedYour memory dies with the accountThe machine stays; your things stayPricingPer seat, per year, risingDelivered once, on your own machineWhen the internet is downUnusableLocal network still worksWho owns the memoryThe platform. You have usage rights.You do — as a file you can copy out04 / THREE THINGSIt does three things, and all three point the same wayReads the world's originalsReports, papers, filings, earnings — first-hand, no paraphrase layer. That's where real information asymmetry comes from.Data stays privateMemory, files, conversations all live on one machine of yours. Not in anyone's account.End-to-end encryptedKeys are generated at the two endpoints. No server-side copy. On this path, nobody keeps your secrets for you.05 / H A R D W A R E P L U SOne button, one sentence, it takes overA small object on your desk. No unlocking a phone, no opening an app, no waiting for a spinner. Press it, speak, and the machine at home starts working.Three channels, chosen by situation —C O N F I D E N T I A L S E C R E T A R Y P L U SBluetoothFor setup and waking. Walk up, press once, pair with your phone. It never touches a server.Hotspot / LANAt home it joins your own network. Voice and answers run inside the house — not a single byte leaves.Relay (when away)Away from home, one press still finds it. Same encrypted long-lived connection your phone uses.When it isn't speaking, it's just a quiet black stone. No camera, no always-on microphone. It listens while held.06 / WHAT WE CAN'T DOThe hard truths, up frontIt's still just an assistantIt will be wrong. It will hallucinate. It will sometimes act before you've been clear. Encryption protects against being seen — not against being mistaken.Lose the recovery code and it's goneThat's the price of end-to-end encryption. We have no backdoor either — anything with a backdoor shouldn't be called encryption.You need a home that stays onPower cut, network down, hardware failure — it's temporarily absent. This isn't a cloud; nobody makes off-site backups for you. Keep your own copy of what matters.We don't sell data or profile youFor a practical reason: we can't see it. In this design we stand outside the door, same as you.R E S E R V E O N EWe deliver a small number, installed one at a timeConfidential Secretary · your things stay in your house
