Private by architecture, not by promise.
In Private mode, the default, local inference, memory and document retrieval run on the device. Optional cloud answers can include retrieved context; Telegram and connected accounts have separate network paths. You don't have to take our word for it. You can watch the wire yourself.
What stays in the box
One device boundary. Everything that makes the assistant work lives inside it. Boosted and Autonomous send your words to a cloud model, only when you turn one on, with your own key. Telegram and email, if you connect them, also cross it — in every mode; calendar reads requested from the screen also reach your configured Google account.
Runs entirely on the device.
How local processing works, with configured integrations described separately.
The Gemma 3 4B model runs on the device’s own chip — with the internet unplugged.
Your memory (SQLite) and your documents and RAG index (Chroma) are stored on the box only.
Embeddings for memory and document search are computed locally with a local model.
Voice is on-device end to end: whisper.cpp for speech-to-text, Piper for text-to-speech. No cloud voice path.
The phone chat is served straight from the device across your own network — no app store, no account, no relay in between.
The model talks to Ollama on 127.0.0.1 (loopback). The model service is boxed in so it cannot reach the internet on its own.
Zero device telemetry. No analytics on the device, no account, nothing phones home.
Verify it yourself
Privacy you can check beats privacy you’re promised. The device ships with a live view of its own network.
Two honest meters
A 60-second proof from the device’s own counters: what your conversation sends (zero in Private mode unless you've connected Telegram or email) next to every byte the whole machine sends to the internet, clock sync included. From the terminal, phntm privacy gives the same verdict as a snapshot, and sudo nft list counters inet filter shows the machine’s byte counter.
So you don’t have to trust us
The strongest privacy claim is one the owner can confirm. Cross-check it against the raw truth with sudo tcpdump -i any.
Quiet by default
In Private mode nothing leaves for the model at all. What you'll legitimately see on the wire is the operating system keeping its clock (NTP), your router's DHCP and mDNS on your LAN, none of which carry content. Your words only ever leave through Boosted or an integration you set up yourself.
The ways out, only on purpose.
Off by default. The product works fully without it, and most people never turn it on. It uses a frontier model on your own API key, billed to you, for the hard task you choose, and every Boosted answer is labelled so you always know which brain replied. Delete the key and it's gone from the box.
- your question
- the memories and document excerpts pulled in as context
- your name and language
- the recent turns of the conversation
- memory filing
- voice
- your documents and search
- open loops
Nothing external is on unless you set it up
PHNTM One can optionally connect to a few services. Each is off until you deliberately configure it, and each is yours, not ours.
An optional mirror
You can mirror alerts and chat to Telegram if you want the assistant in your pocket outside your network. Off unless you connect it; when on, those messages travel through Telegram like any other.
Optional, your account
The assistant can work with email if you choose to set it up with your own account. Off by default; it never reads or sends mail you didn’t configure.
Stays inside your house
Planned PHNTM One 1.0 capability, not yet release-verified. The planned connection to your own Home Assistant would control lights, plugs and scenes over your local network, with a token that stays on the device. That traffic would stay on your network and appear as local in Watch the Wire.
It’s your machine, and your data
Export it all
In System, Take Everything writes your memories, reminders, open loops, documents, preferences and history to a USB stick, with checksums. Your keys and passwords never go on the stick.
It’s a real computer
Debian Linux, with SSH documented and never removed. You can read the assistant's source; you never need a terminal for normal use.
Recoverable by design
You tap Install on a signed update, and it rolls itself back if a self-test fails. Every night it makes an encrypted backup and keeps seven, so nothing changes underneath you and a bad day can be undone.
An off switch you can hold
Tap-to-talk is the default. Explicitly enabled local wake detection uses the mic between conversations; it starts off. Unplug the USB microphone to disconnect that input physically.
Private because you can check.
Own the hardware, read the code, watch the wire.
Order PHNTM One$799 · one-time · no subscription · made to order · ships within 7–10 business days after payment