Security and privacy
What stays, what leaves, and who decides.
Only what the app does today, in the closed beta for Windows. Nothing here is a certification.
You approve, one action at a time
- Every action is born as a proposal and only happens after your “yes”. Every approval runs only once and is logged.
- Computer control only with a spoken plan, a “yes” and a single action. The app rechecks the front window at the moment of the “yes”, and there is an immediate stop shortcut.
- If the app restarts, pending approvals come back marked as pending and nothing is sent on its own.
- The history logs every send, failure and decline (declined items are kept for 30 days, the rest for 12 months) and can be exported as CSV. Undo only exists on Telegram, for 60 seconds; on other channels the button explains why it can’t.
What stays on your computer
- Voice recognition (Whisper) runs on the computer: your audio doesn’t leave it.
- Keys and tokens are stored encrypted with Windows protection (DPAPI); anything that was stored in plain text was migrated.
- Search across Claude Code and ChatGPT sessions is local, ships switched off and says which session each answer came from.
What leaves, and where it goes
The “What leaves the computer” screen lists each destination with a switch: the AI provider, the spoken voice, cloud transcription (optional), Telegram, Google Calendar, Spotify, among others. A new destination arrives switched off. SMS, calls and Instagram/Facebook (Meta) ship switched off and don’t have an account or a real test yet. The spoken voice receives only the text to be said, never your audio; audio only goes out if you choose cloud transcription.
What doesn’t exist yet
- There is no independent security audit and no certification (such as SOC 2).
- The installer is not yet signed: Windows (SmartScreen) may show a warning.
- Real testing with voice, microphone and paid channels is still missing; the automated tests (1,876 with no failures, on Nov 10, 2026) ran on the development computer.
How to report a vulnerability
Write to [email protected] with the subject “Security”. Describe what you saw and how to reproduce it, and please don’t publish it before we have talked. There is no bounty program. The contact details are also in security.txt.