Free
$0
- A shared enclave, with each person's data under their own key
- Standard daily limits
- Every feature above
An agent for your whole life that nobody else can read.
Meet Pip. It reads your mail, keeps your calendar, remembers what matters and does the busywork, from inside a sealed enclave that not even we can open.
Intel TDXPhala enclaveEnd-to-end encrypted GLMPasskeys
The point of all this
What nobody can read
Pip runs inside an Intel TDX confidential machine. Its memory is encrypted by the processor, and the keys to your data only exist inside it. When Pip thinks, it sends your words, encrypted, to a model running in a second enclave. The people who run Embody, the cloud it runs on and the model provider see ciphertext. The app asks for a fresh proof every time you open it, and you can check that proof yourself.
Your mail
Gmail, Proton and IMAP are read inside the enclave. Credentials never leave it.
Your memory
Everything Pip learns about you is stored encrypted with a key only the enclave holds.
Your keys
The wallet key is derived inside the enclave and never written down anywhere.
Your messages
Chats are encrypted end to end to the model's enclave. Venice relays ciphertext.
Youpasskey
TLS ends inside
Pip's enclaveIntel TDX · Phala
encrypted end to end
Model enclaveGLM · Venice
What Pip does today
Useful from the first conversation
Memory that compounds
Pip keeps facts from every conversation, so you stop repeating yourself. You can read and delete every one.
Morning briefing and mail watch
A short note each morning on your day, and a nudge when something in your inbox actually needs you.
Gmail, Calendar, Proton, IMAP
Plus a private forwarding address, so any provider can send mail Pip's way.
A browser that does things
Pip opens sites and acts on them inside the enclave, and shows you a screenshot before anything that matters.
An enclave wallet
ETH and stablecoins, with spending caps and allowlists you set, checked again right before every signature.
Payments with brakes
New payees get a cooling period, large payments a timelock you can cancel. Money always waits for your passkey.
Passkeys, no passwords
Sign in and approve with Face ID or your security key. Nothing to phish.
On your home screen
Install it as an app with push notifications. Approvals are one tap away.
How it works
Three steps, no setup call
- Make an account with a passkey.No password and no email required. Your account key is created inside the enclave.
- Connect what you want.Mail, calendar, a wallet, a bank. Each credential is sealed in the enclave the moment you hand it over. None of it is required.
- Talk to Pip.Ask for anything. Risky actions wait for your tap; money and outgoing email also need your passkey. You decide what Pip may do on its own.
Pricing
Free to start. Your own enclave when you want it.
Premium
$20/month
- Your own dedicated enclave: no neighbours on the hardware
- About 5× the limits
- Your own phone number for Pip coming
- Priority when things are busy
Existing accounts upgrade from More → Plan in the app. Cancel any time; your data stays yours either way.
Get on the list
We're letting people in a few at a time. Leave an email and we'll send an invite.
Your email is stored inside the enclave and used only to invite you. No newsletter, no trackers on this page, nothing shared. We keep a salted hash of your IP to stop spam, never the IP itself.