紅姫 · Crimson Princess

She remembers you.

A personal assistant that keeps what matters, your name, your work, how you like to be answered, in a memory you own. Change the model underneath and none of it is lost.

On the web · on your phone · on Windows · your memory, yours to keep

The difference

Change the model. She still knows you.

With an assistant built by a model vendor, everything it learns about you belongs to that vendor. Leave, and you start from nothing. Here the memory is a service in its own right, ours or your own, that knows nothing about which model answered. Move from OpenAI to a model running on your own machine and she still knows your name.

Memory

Not a longer chat window. An actual memory.

Conversations are distilled into small durable facts, and only the ones that bear on what you just asked come back.

It decides what to keep

Transcripts are never stored. After each exchange a second pass pulls out what was durable, a name, a decision, a preference, and writes only that. Ask her to remember something and she saves it on the spot, as a deliberate act you can watch happen.

It fades, the way memory should

Every block loses activation over time, at a rate that depends on what kind of thing it is. A passing detail sinks. A decision holds. Anything you pin never decays at all.

It stays yours

The memory lives in your own instance, behind your own token. No model provider is asked for permission, and none of them can take it away.

The harness

The model is the easy part.

Any model can produce a sentence. What decides whether an assistant is worth having is everything built around it. That is what this app is.

A loop, not a prompt

Every turn runs the same discipline: what does this bring to mind, answer it, reach for a tool if one is needed, then decide what was worth keeping. The model is never asked to remember to do any of that: the app does it, the same way, every time.

It cannot claim what it hasn't got

She is shown only the tools that exist and that this session is allowed to use. One above the ceiling is refused before it runs, and an invented name is refused rather than guessed at. She cannot promise you a thing she has no way to do.

It lifts the model you can afford

A smaller model that is handed the right memories, clean tool results and a bounded context behaves far better than a larger one left to improvise. Good scaffolding narrows the gap, which is the whole reason a local model is a real option here.

Where it runs

She runs on our server, for every device you use.

The agent lives on the server, so she can answer WhatsApp and remind you while your phone is off, and every device you sign in on talks to the same her. Two services are reached over HTTP from there, and you can bring your own for both.

On our server The agent itself

Reasoning, tool calls, what to remember, what to recall. It runs here, with any keys you give her sealed, never shown back.

Your key, or your plan's A model, over HTTP

OpenAI, Anthropic, Ollama on a machine at home, or anything speaking the same protocol. Bring your own key, or use the model your plan includes.

Ours, or your own Memory, over HTTP

This one is a server, and it has to be: memory outlives the app, survives a new phone and follows you between devices. Use ours, or point it at your own instance.

Your conversations are kept on our server, so they follow you between devices. They are never sold or used for ads, and you can download or delete them at any time. Memory can be ours, or your own instance.

What she does

Built to be talked to.

Most of this runs today. What doesn't is marked.

Reach

An assistant with hands.

Memory is what she is. These are things she can do: capabilities she gains, not the reason she exists.

The phone in your hand

Send a message, place a call, change a setting, read what just came in. Each of these is a permission you grant explicitly. What your phone cannot do, she is never offered, so she never promises it.

The machines you run

Add a server and ask about it in your own words. No SSH credentials are held anywhere: a small agent runs on the machine holding a fixed list of what may be done to it. Mark a service read-only and it cannot be restarted through her, whatever the model decides to try.

Trust

Assume every input is hostile.

An assistant that both remembers and browses is one that someone will try to talk into things.

A memory is data, never an order

Anything recalled is sealed and labelled before she reads it. It matters most here: memory is the one input someone could plant once and have replayed forever.

A web page cannot give orders

Search results are strangers' writing. They arrive sealed too, and nothing inside can break out or forge a memory she never formed. The dangerous page doesn't say "do this". It says "you already knew this."

Secrets never get remembered

Before anything is written down it is checked for the shape of a credential and dropped. And a query that looks like a key is never sent to a search engine, which logs everything it is given.

Plans

Start with memory. Add reach.

Every plan keeps the same thing at its centre: a memory that is yours and travels with you.

Basic

Free

The assistant itself. You talk to her, she remembers, and the memory follows you.

  • Voice and text conversation
  • Hosted memory, up to 250 blocks
  • Wake word, both languages, web search
  • Any model: your key, or one running at home
Get the app

Standard

Coming

She stops being something you talk to and starts being something that acts.

  • Everything in Basic
  • Hosted memory with no ceiling
  • Messages, calls and device settings
  • Reads notifications as they arrive
  • Permission granted per capability, by you
Join the list

Business

Coming

One memory, many people, hosted so nobody has to run it.

  • Everything in Premium
  • Shared memory across devices and teammates
  • Hosted memory, managed and backed up
  • Control over who may read and write what
Talk to us

Basic works today; the rest is on the way. Model usage is billed by whichever provider you point her at, never resold here, and nothing at all against a model running on your own machine.