AI that lives
where your data does.
A phone app plus a PC companion, DESK console, CLI, and daemon, that run AI entirely on your own hardware: on the phone itself, on your PC over your LAN, or both at once. No accounts, no cloud required, no telemetry. Measured, never estimated.
⬢ STATUS // Feature-complete and in final on-device testing. No public download yet, the lists at the bottom get it first.
Chat
Streaming conversations with local models, with the full toolbox.
- History with search, regenerate, edit-and-resend
- Markdown, image attachments (up to 4 per turn), export
- Per chat, pick the source: this device or your PC
- JSON mode, personas, per-model sampler configs
Models
Your phone is profiled and the catalog is ranked by what actually fits it.
- Device profile: RAM, chip, storage, acceleration
- Recommender ranks live Hugging Face models that fit
- Real measured speeds after you run a benchmark
- Resumable downloads with honest progress; sideload GGUFs
- Tool-competence probe: can this model drive tools, on your device, not someone's chart
Pair
Link phone and PC over your LAN in one code.
- mDNS/UDP discovery or manual entry
- 6-digit verified pairing code
- TLS with fingerprint pinning + cert-change detection
- Plaintext consent gates, quick-pair resume
- One tap to unpair or revoke
Devices
The device-pool dashboard.
- Every linked device: name, live status, battery, RAM, link health, measured speed
- Honest fit / marginal / no verdict on joining work, with the math shown
- Open, documented read-only API: hubctl devices metrics --json
Agents
Three modes.
- A labeled cascade demo
- Real supervision of your PC's coding agents: watch live, approve/deny with countdowns, steer, start per project
- Task scheduler: queue prompts for later, results pushed to your phone
Tools & Safety
The AI can act, under your rules.
- Actions: shell, files, launch apps, web search, reminders, your own custom tools
- Four-tier permissions: yolo / ask / deny / custom
- Approval cards on your phone
- Append-only audit log, viewable and exportable; failures in plain language
Memory & Files
Your context stays yours.
- Opt-in cross-chat memory: you pin what's remembered, wipe anytime
- On-device RAG: point the AI at your folders and answers quote your own documents, sources shown
Settings
Yours to shape.
- 10 theme presets + a custom editor
- Reduced motion, power modes, battery-exemption guidance
- Consent-gated phone control, notifications, tutorial replay
- Catalog management, benchmark export
Everything you run is open, FSL-1.1, converting to Apache-2.0 two years after each release. Here is exactly where the line falls:
⬢ FINE PRINT // FSL-1.1 means source-available now, Apache-2.0 automatically two years after each release, you're never locked in forever. "Open" covers code and protocol: your API keys, models, chats, and device names never touch anything we run, there is no server. The mobile and desktop apps are one codebase sharing one design system, so "open" means identically open on both.