Priver AI is a personal AI companion device built around a hardware-rooted memory vault. Its sensors observe your day, distill it into a private event-graph that never leaves a secure enclave, and answer your questions on-device first — reaching the cloud only when you allow it, and only with what you authorize.
Turn to ChatGPT, Claude, or any assistant and pick up mid-thought — your memory of what you saw, heard, read, wrote, and did travels with you. No re-explaining, no copy-paste, no starting over.
“What do you think of the car I photographed last night?”
“Summarize what was actually said in this morning's meeting.”
“Find that article I read about sleep yesterday.”
“Does the email I sent Sara come across as too harsh?”
“Is the thing I bought on Amazon two days ago worth keeping?”
“How could I improve the presentation I made last weekend?”
The same context works across ChatGPT, Claude, or any AI assistant — it's portable, not locked to one provider.
A device worn or carried on the body — pendant, pin, clip, wristband, or pocket enclosure. Every function below is rooted in silicon, not policy: the protections are enforced by the hardware itself, so they hold even if a vendor, a network, or a contract does not.
A trusted execution environment stores your persistent event-graph memory and a cryptographic key pair generated inside the enclave — structurally incapable of being exported. Your memory is reachable only through an attestation-verified interface.
A sensor-side extraction circuit turns raw camera, microphone, and biometric data into normalized events on-device — then a unidirectional bus, frame-buffer clear, and write-only registers prevent the raw data from ever crossing back out.
External AI systems can't just read your memory. Each request must present an identity attestation, task context, requested scope, and a passport — verified against an on-device registry, with session, purpose, and derivative-use limits, plus revocation.
Coordinates one coherent memory across your paired devices — glasses, watch, earbuds, phone, desktop — using federated update signals that omit raw sensor data, scaled by per-device trust scores and filtered by a jurisdiction map.
The software layer that turns the vault into a coherent memory spanning all the devices you carry — and an answer engine that consults you before it consults the cloud.
The same memory, captured surface by surface — each device contributing the modalities it is built for, and your cross-application life folded in alongside.
Every moment is classified by how it was acquired — visual (cameras), auditory (microphones), textual-reception (what you read), textual-emission (what you write or dictate), and behavioral-activity (where you go, what you use, what you do).
Each memory item carries when (temporal), where (spatial), from what source (source-reference), and which device captured it (hardware-attribution) — so you can retrieve along any axis or any combination of them.
Paired devices stay consistent through configurable topologies — a primary coordination device, full replication, or modality-sharded distribution — with cryptographic device-pairing, synchronized audit logs, and retrieval-forwarding between devices.
Questions are answered from the closest, most private source first. The cloud is the last resort — not the default.
The query runs against your own on-device memory. If a confident answer exists, it is returned with attribute-context — when, where, and through which device it was learned. Nothing leaves your hardware.
works fully offlineOnly if Tier 1 falls short, and only where you've consented, the query escalates to a federation you belong to — household, team, or family — returning answers with per-contributor attribution.
consent-scopedAs a final step, the query may reach a cloud AI — but only the portions your cloud-transmission policy authorizes. Every resolution carries a lineage record showing exactly which tier answered and what was sent.
policy-gatedYour memory isn't a wall of toggles — you talk to it. Ask what you did last Tuesday, or tell it in plain language to delete or limit anything. Each request is parsed into structured edits and propagated across every paired device.
The software layer that aggregates your cross-application activity into a single, editable, user-owned event-graph — and negotiates, on your terms, what any AI service is allowed to see.
Observes activity across AI chats, search, browsers, messaging, documents, calendars, files, and media — and ingests existing history like email, browser logs, and chat archives — into one typed graph from day one.
Your graph is organized into layers along application, time, and location dimensions. Toggle any layer on or off; only enabled layers can ever contribute context — no all-or-nothing privacy bargains.
Before any context is sent, the AI service must cryptographically accept your terms — maximum retention duration, permitted operations, and what derivative data it may create. No acceptance, no transmission.
Less-trusted services receive less specificity. Identifying entities are replaced with category labels — from full disclosure down to partial, heavy, or summary-only abstraction — based on each service's trust score.
One physical root of trust, two software layers running on top of it. The hardware makes the promises enforceable; the software makes them useful.
The difference isn't a privacy policy you have to trust. It's an architecture where the protections are built into the hardware and the math.
The cryptographic key pair is generated inside the enclave and can never be exported. You are the locus of control — not a vendor, not a cloud operator.
Camera, mic, and biometric streams are reduced to events behind a hardware privacy boundary and discarded. What's shared is abstracted; the originals stay home.
Answers come from your own memory first. The system runs offline, and reaches external AI only under a policy you set, sending only what you authorize.
A physical control deletes memory, blocks its return with tombstones, corrects every peer and AI that learned from it, and proves compliance in a signed log.
From a single person with a drawer full of devices to consent-scoped sharing between people who trust each other.
Glasses, watch, earbuds, phone, and desktop share a single coherent memory — and answer from it without ever calling the cloud.
Cohabitants federate residence-relevant memory with symmetric consent — "what was the weekend plan?" resolves across both people's graphs.
Teams share engagement memory under asymmetric rules — pricing stays lead-only — with lifecycle handlers and exportable compliance records.
Family members federate family-relevant memory, with healthcare and decision categories scoped to the people they actually concern.