It thinks where you are.
Tilde’s everyday model runs on your device. Your conversation does not need a round trip to a data center before you get an answer.
How Tilde works
The useful part of AI stays close to home.
Tilde does everyday thinking on your device, protects what it remembers, and uses a privacy proxy when an answer needs the web.
YOUR TRUSTED DEVICEready
Tilde thinks hereUsing the model on this device
Readable hereWorks offline
One conversation, four moments
From your question to your other devices.
The important part is not that Tilde uses a cloud. It’s what happens before anything reaches it.
- 1
You ask
Your words enter Tilde on the device in your hand.
- 2
Tilde thinks here
The everyday model produces an answer without sending the chat away.
- 3
It locks the record
If sync is on, the conversation is encrypted before it leaves.
- 4
Your devices catch up
Only devices you trust can unlock and continue the conversation.
When Tilde uses the web
The web, without your identity attached.
Tilde sends a focused request through its privacy proxy. The proxy forwards the query and returns the result while keeping your Tilde account, device, and conversation identity out of the request.
The query itself has to leave your device to be answered. Your full conversation does not.
Tilde on your deviceSelects only what the request needs
Privacy proxyForwards the query without your Tilde identity
Web sourceReturns the current information
Result returns to Tilde
The difference you can feel
Private without becoming precious.
Tilde is designed to feel like a normal, useful assistant. The privacy model should disappear into that experience.
It protects what it remembers.
Readable conversations and the keys that unlock them belong on your trusted devices—not in a cloud dashboard.
It can follow you safely.
When you choose sync, Tilde encrypts each record before it leaves. The cloud moves locked packages between devices.
The web comes through a privacy proxy.
When an answer needs current information, Tilde sends a focused request through its proxy. The destination sees an anonymous query instead of your Tilde account, device, or conversation identity.
What goes where?
Three places. Three different jobs.
“Local-first” does not mean pretending the internet does not exist. It means giving every part of the system a narrow, understandable role.
On your device
- The AI model
- Readable conversations
- The keys to unlock them
This is home.
In Tilde’s cloud
- Your account
- Trusted-device coordination
- Encrypted conversation records
Coordination, not comprehension.
Through Tilde’s web proxy
- A focused web query
- No Tilde account, device, or conversation identity
- The result returned to your device
The request travels without your Tilde identity.
When you get a new device
Your history does not arrive just because you know the email address.
Signing in proves who you are. A trusted device or your Recovery Kit proves the new device should receive the keys to your conversations.
That extra step keeps an inbox takeover from quietly becoming a conversation takeover.
~
New iPhoneWaiting for access
Have another device?Approve it there
orYour Mac or phone passes access directly to the new device.
Starting without one?Use your Recovery Kit
The kit gets you back in when every trusted device is unavailable.
Tilde cannot approve a device behind your back.
That’s the simple version.
Tilde keeps intelligence local, routes web requests through a privacy proxy, locks durable content before sync, and gives trusted devices—not the cloud—the ability to read it.