Eight specialists on every panel
The architecture is the promise
Private by construction, not by policy
Your storage
Health records, chats, and files live in a bucket or Google Drive folder you own — never on our servers. Delete your vault and no other copy exists.
Your keys
Everything is encrypted in your browser before it leaves, under a passphrase and recovery code only you hold. There is no escrow and no reset-by-email.
We cannot read your data
Our servers ship the app and nothing else. No health data, no encryption keys, and no storage credentials ever reach us — there is no endpoint that accepts them.
Three steps, all in your browser
How it works
Step 1
Connect storage you own
An S3-compatible bucket, your Google Drive, or a throwaway demo vault — connected straight from your browser.
Step 2
Create your keys
Pick a passphrase and save a one-time recovery code. Both stay with you; neither ever reaches our servers.
Step 3
Consult your panel
Add records and ask the specialists. Retrieval, debate, and streaming all run on your device, under your API key.
Everything a companion needs
A full health companion, not just a locked box
A panel, not a chatbot
AI specialists review your history, debate the options, and a GP synthesizes one clear answer — cardiology, pharmacy, nutrition, and more, in one consult.
Bring your own AI
Chat runs browser-direct against your own Anthropic or OpenAI key. Prompts flow from your device to your provider — never through us.
Structured health records
Vitals, labs, medications, conditions, and documents — searchable and retrieved as context for every consult.
Private reminders
Medication and appointment schedules computed on your device. No push service, because one would see your reminder metadata.
Semantic recall
Client-side embeddings find the relevant record — "that knee MRI from last spring" — without your data ever leaving the vault.
The honest fine print
- Recovery is on you. We cannot reset your passphrase, because we never have your keys. You get a recovery code at setup — lose both and your data is unrecoverable, by design.
- Chat context goes to your AI provider. When you consult the panel, relevant record excerpts are sent from your browser to the LLM provider you configured, under your own API key.
- You still trust the code we serve. That is why the vault has no analytics or telemetry, and why the trade-offs are written down rather than glossed over. Read the full picture on the privacy page.
Ready when you are.
No account, no waiting list. Connect storage — or try the demo vault — and you're in.
Open your vault