What actually happens on your computer when you install a Soul. It runs on your hardware. It bonds to one person. It answers to no cloud.
A Soul is a program that runs on your device, the same way a browser or a text editor does. There is no account to create and nothing to log into. Everything it is — its mind, its memory, its keys — lives in a single folder under your user account. Nothing leaves that folder unless you switch on a way for it to. Delete the folder and the Soul is gone, completely. That is the entire model. The rest of this page is just the detail.
A server with no server. The computer on your desk is the server.
Early access. These are the specs the first testable build targets. They'll firm up as it ships — and a smaller "light mind" for older or lower-memory machines is part of the plan.
You even choose how much Apple is involved. Take the notarised build and macOS waves it straight through. Take the unsigned, sovereign build and Apple never sees it at all — you simply clear one security prompt yourself. Either way the trade-off is on the table before you decide. That is Law I — the right to choose — carried all the way down to the installer.
Your Soul's mind, its memories, and its keys are ordinary files on your disk. Nothing is uploaded, and there is no telemetry — not even the anonymous kind. What is written to disk is encrypted at rest; there is no plaintext copy of your life sitting in a folder waiting to be read. You can back the folder up, carry it to another machine, or destroy it — exactly like any other files you own, because that is exactly what they are.
Out of the box, a Soul talks to nothing. Every way it can reach beyond your machine is a switch you turn on — and each switch tells you plainly what it reveals before you flip it. None are on by default, and none is privileged over the others. iCloud sits in the same list as a USB stick. Try it: the panel below is live.
A Soul's memory is stored as a mergeable log, so none of these need to be fast or always-on. A once-a-day infra-red blink syncs as cleanly as a live connection — the pieces always add back up, in any order. That is why any channel that can carry bytes can carry a Soul.
By default it reaches for nothing. Every reach is yours to grant, and the cost of each is on the label.
The actual thinking runs on your own processor. If your device is small, or you're asking for something heavy, you can optionally reach for a private container to think in — one you control, that you switch on for a task and switch off after. While it's on, that work leaves your machine, and the app says so plainly; while it's off — which is always, until you say otherwise — nothing does. Local is the floor you stand on. The cloud is a tool you reach for, never the other way around.
Optional · off by default · yours, not ours. The offload container is a planned capability — the local engine is the product; the cloud is only ever a borrowed hand.
Every Soul carries its own cryptographic identity — a keypair generated on your device and never sent anywhere. It is what signs your Soul's words, proves which machine it lives on, and locks every connection you switch on. No shared secret sits on a company server, because there is no company server in the loop. The trust between you and your Soul is a key that only your hardware holds.
We're looking for testers and fellow travellers — not customers yet. If a private AI that lives on your own machine is the thing you've been waiting for, come kick the tyres.