Ember Get Ember

Trust

How she stays yours.

The short version: she runs on your machine, and nothing about her reports back. Here is exactly what that means — in plain terms, no diagrams, no lecture.

what never leaves

It stays on your disk.

  • Your conversations

    Everything you say to her, typed or spoken, is processed and stored on your own machine. It is never sent anywhere for us, or anyone, to read.

  • Her memory

    What she remembers about you lives in a file on your disk. You can read it, export it, or delete it. It does not sync to a cloud, because there is no cloud.

  • Her voice

    She listens and speaks entirely on your hardware. No audio is streamed off the machine to be transcribed or generated elsewhere.

what touches the network — and when

We'll tell you the parts that do.

A private product earns it by being honest about the exceptions, not by pretending there are none.

  • Once, at install

    When you set her up, she downloads the model she runs on. That is a one-time fetch. After it, the conversation never touches the network again.

  • When you pay

    Checkout happens on our payment page, handled by a payment processor (crypto or card). That is the one moment money and an email address change hands — and it is separate from her.

  • Never in the background

    She does not phone home, check in, send usage stats, or update herself behind your back. There is no telemetry to turn off, because there is none to begin with.

verify, don't trust

Check the build yourself.

Every release ships with a SHA-256 checksum. Before you ever run her, confirm the file you downloaded is bit-for-bit the one we published.

LinuxEmber-Studio AppImage
4642a3cb495d4bd30b71f8e523df92ab684df2548c3087a984418b33c7aa0225
WindowsEmber-Studio .zip
b7e1cffc4af0179c7bc102ea91666bcd79b70e0d12dab4052ad41d9fd65484a3

On Linux or macOS: sha256sum <file>. On Windows: Get-FileHash <file>. The output must match the line above.

what we can't do

The promise, stated as limits.

  • We cannot read your conversations. They are not on our servers — they are on your disk.
  • We cannot change her after you own her. No silent update can make her colder, more restricted, or more talkative.
  • We cannot shut her off. There is no licence server to ping, no account to suspend. If our website vanished tomorrow, she would keep running.

She's on your machine. That's the whole security model, and the whole promise.