Boosted mode, and exactly what it sends

Private mode is the default: everything runs on the device, with no network and no account needed. Boosted mode is optional. It uses a frontier cloud model on your own API key, entered on the device, and it's used only when you enable it.

What leaves the box on a Boosted answer

The trade is stated on screen, not buried. On a Boosted answer, these go to Anthropic, billed to your own key:

• your question
• the memories and document excerpts pulled in as context
• your name and language
• the recent turns of the conversation

What stays local, always

Memory filing, voice, documents and search. Open loops never travel to Boosted mode.

Autonomous: Boosted, plus actions

Autonomous mode is everything Boosted does, plus actions you ask for from your own Telegram: check the device, set reminders, search, draft and send email, and manage your Google Calendar. It is off by default and uses your own Anthropic key. Every email is shown to you in full before it's sent, and every calendar change is spelled out before it happens; each waits for your yes, bound to exactly what you approved. What you ask and what those actions return go to Anthropic; memory filing, voice and documents stay on the device.

How you'll know

• Every answer is labelled with the brain that produced it.
• You can check it on the wire. Run tcpdump during a Boosted answer and you'll see an encrypted connection to Anthropic. Switch back to Private, and disconnect Telegram and email, and the wire goes quiet again. How to check →
• Delete the key and it's gone from the box.