Skip to content

Private AI,sealed in hardware.

Karui encrypts every message in your browser and runs the model in a verified hardware enclave. Our servers only ever see ciphertext.

Inference runs inside

  • PhalaTDX enclaves
  • NEAR AIGPU TEEs
  • GLM5.3
  • GLM5.3 Flash
  • Qwen3.8 · 27B

How it works

Encrypted before it leaves. Unreadable after it lands.

Three steps run on every message, and none of them asks you to trust us.

  1. this device

    message

    Encrypted in your browser

    Your key is locked with your password and never leaves your device. Every message is sealed with AES-256-GCM before a single byte goes out.

  2. attestation report
    • hardwaregenuine enclave
    • codemeasured
    • signaturevalid

    The enclave proves itself

    Before sending, your browser checks a report signed by the chip itself, proving the model runs on genuine Intel TDX hardware. No proof, no request.

  3. karui database

    role user

    encrypted_content AmZ1x9…Q7k=

    key not on this server

    We store only ciphertext

    Our servers relay encrypted traffic and store encrypted history. We hold no key to read it.

What we can see

Same message. Two very different databases.

Most AI chats store your conversations as plain text. Here is the same message at rest.

A typical AI chat

SELECT * FROM messages1 row

user_emailalex.m@mail.com
titleBlood test questions
content"My blood test came back. Ferritin 14, B12 180. Anything to ask my doctor?"
readable_bystaff, vendors, anyone with access

Readable by staff, subpoenas, breaches and training pipelines.

Karui

SELECT * FROM messages1 row

user_emailalex.m@mail.com
encrypted_titleTm9wZSwgbm90IGEgY2hhbmNl…
encrypted_content
key_on_servernone

We know whose account it is. Only you can read what it says.

Features

Everything you'd expect from an assistant. Nothing you'd have to hide.

Memory, projects, documents and search, all working on encrypted data.

Health

  • Blood tests 2026
  • Allergies

Work

  • Q4 roadmap
  • Writing style

Home

  • Lease & deposit
  • Budget

enclave picked 2 of 6 files for this message · index never leaves encrypted

Advanced Memory

Karui remembers what matters, in categories and files instead of one long note. A model inside the enclave picks what to read, so the server never sees an index.

  • Thesis18
  • Moving to Berlin7
  • Side project23

Projects

Group chats with their own instructions and shared memory, encrypted like everything else.

Lisbon trip plan

HTMLPDF

Artifacts

Ask for a report, a page or a plan and get a standalone document, exportable as HTML or PDF.

ferritin normal range adultsweb
conversation & memory stay sealed

Private web search

Only the search query and the address of a page Karui reads leave your browser. Your conversation stays sealed.

Powered by Brave Search

GLM 5.3 Flash · fast · fallback ready

Light or Heavy

Light for quick questions, Heavy for deep work. Your message only goes to the provider that runs it.

  • Calendar
  • Notes
  • Tasks
  • Email

Bring your own MCP

Connect your own tools through the Model Context Protocol. Your browser talks to them directly, and actions that change something wait for your OK.

how should Karui answer?

Be concise. Metric units.

Answer in Polish unless I write in English.

Custom instructions

Set your tone, length, language and format once. Stored encrypted, applied everywhere.

On the roadmap

  • Agents
  • Deep research
  • Shared projects & chats
  • More usage
  • iOS & Android apps
  • Browser extension
  • Coding agent
  • Enterprise plan

Every new feature ships under the same rule: if it can't work on encrypted data, it doesn't ship.

Models

Open models. Closed doors.

Open-weight models, served from hardware enclaves by independent providers. Pick the model per chat, and the provider in Settings.

Phala

Messages are encrypted in your browser and handed only to model hosts on Phala's own attested hardware. Which code release runs isn't pinned yet.

region
USA
models
2
attestation
hardware verified in your browser
plan
Pro
sees your data
no
  • GLM 5.3Deep reasoning and long tasksHeavy
  • Qwen 3.8 27BOpen model that reads images
  • more models soon

NEAR AI

Each model runs in its own enclave. Your browser checks it is genuine Intel TDX hardware, then encrypts text and images to its key. Which code release runs isn't pinned yet.

region
USA
models
2
attestation
hardware verified in your browser
plan
Free & Pro
sees your data
no
  • GLM 5.3 FlashFast everyday answers, reads imagesLight
  • Qwen 3.8 27BOpen model that reads images
  • more models soon

Pricing

Private by default. On every plan.

Both plans get the same encryption and the same guarantees. Pro gives you the newest features and more usage.

Free

To try Karui and ask the occasional question.

€00123456789forever

10,000 tokens a day, roughly 5 messages

  • End-to-end encryption
  • Light model
  • Advanced Memory & one project
  • Web search, 10 a day
  • Artifacts & images
Start for free

Pro

For everyday use.

€0012345678900123456789per month + VAT

800,000 tokens every 5 hours, up to 3.2 million a week

  • Everything in Free
  • Heavy and every other model
  • Your choice of provider
  • Unlimited projects, longer conversations
  • 50 web searches a day
  • Bring your own MCP connectors
Upgrade to Pro

FAQ

Questions, answered plainly.

Something else? support@karui.eu

Say anything.
We'll never read it.