A private personal AI. Pre-launch.
Remembers everything. Shares nothing.
Violet runs your day and remembers your life. All of it is sealed on your device with a key only you hold, so even we are locked out. She works for you, and only you.
A presence, not an app you remember to open
Answers, or says she does not know
Ask anything, or just talk. Voice in and voice out while you hold the button, or type when that suits the moment. No confident guessing: when she does not know, she says so.
Notices your day
Your calendar, to-dos, reminders, and weather in one calm glance, with a word at the right moment. Real data or an honest empty state, never an invented one.
Never acts without your say
Consequential actions wait for your confirmation, every time. The safety rails are built outside the model, so her judgment is never the last line of defense.
Everywhere, from one account
One Violet across web, desktop, and phone. Sign in and your life follows you, carried between devices as sealed envelopes only your devices can open.
From your voice to a sealed envelope
- 01You talk, or type. The mic is live only while you hold the button, never always-listening.
- 02She grounds every word in your real day: calendar, tasks, reminders, weather. When there is nothing, she says so, in exactly these words: "Nothing scheduled. The day is open."
- 03Everything is sealed on your device before it syncs and follows you as locked envelopes. One Violet across web, desktop, and phone.
Sealed is a specific claim. The next section shows exactly what it means.
Private by architecture, not by promise
- 01Your content is sealed on your device with a key derived from your passphrase (PBKDF2-SHA256, 200,000 iterations, into a non-extractable AES-256-GCM key). That key never leaves your device.
- 02With sync on, the server stores only locked envelopes: ciphertext it cannot open, plus the minimal metadata sync needs.
- 03We cannot read what you and Violet talk about. Not as a policy, as a property of the design.
Inside the app, you can ask her what the cloud can see. The Trust panel answers from live state, not a policy page: locked envelopes only, or nothing at all. The full ledger, including what we can see, is in the privacy policy draft.
The Learn library explains this at whatever depth you want: how the encryption works and how the architectures compare.
A quiet word at the right moment
When you arrive, one calm line: what is on, when it starts, what the weather is doing. Once a day, then she is quiet.
When something starts within the hour, a small strip appears. No popups, no pings.
After six, a plain line about what is left. When nothing is, she says so: a quiet evening, with nothing left on the day.
2 things on today, first at 9:00 AM. One task due. 68° out now.
Pick up the dry cleaning
Send the invoice
from your real day, nothing inventedWhy I am building Violet
I am building Violet because a personal AI is only worth having if you can tell her everything, and you should not have to trust a company's policy to do that. So the design locks us out: your content is sealed on your device, and the server holds envelopes it cannot open.
She is pre-launch, the work is recorded in the build log, and the honesty rules (no invented data, honest empty states, nothing without your say) are product decisions, not marketing.
Nathan, building Violet.
If that is the AI you have been waiting for, the waitlist is below.
Asked before trusting her
When can I use Violet?
She is pre-launch. Join the waitlist and you get one email when she is ready. We do not publish dates we cannot stand behind.
What happens if I lose my passphrase?
Your key is derived from your passphrase, and we never have either. We cannot reset it or recover sealed content. That is the cost of a server that cannot read your life.
What can the server actually see?
Locked envelopes it cannot open, plus the minimal metadata sync needs to work. The full ledger is listed in the privacy policy draft.
Is the mic always listening?
No. The mic is live only while you hold the talk button; release it and the mic is off. There is no always-listening mode.
What will it cost?
There is a real free plan, and Pro is $19 a month. End-to-end encryption is in both, always free. See the pricing page for the full breakdown.
More questions answered in the FAQ library.
What actually got built
A dated, plain record of the work. Real changes, real dates, no spin.
-
2026-07-04
Build log 001: what is actually built
An honest inventory of the repository: what is built and tested, what is only scaffolded, and what does not exist yet.
-
2026-07-04
How Violet's encryption works, line by line
A walk through the real sealing code: PBKDF2-SHA256 at 200,000 iterations, a non-extractable AES-256-GCM key, a fresh nonce.
-
2026-07-04
Why Violet shows you nothing instead of something
Three real empty states from the codebase, and the rails that keep placeholder data out of the product.
That is Violet: a partner by your side, sealed by design, and even we are locked out. She is pre-launch. One email when she is ready.
Join the waitlist