Skip to content

Local by construction

Everything — the model included — runs on your machine. What you choose to share leaves sealed.

Private · Offline · A desktop app

A second brain that remembers. Yours alone.

Journal, AI companions, the people in your life as a living constellation, and 139 questions you have never been asked — with a model that runs on your own silicon. Locked with a password only you know.

free · no account to write · no telemetry scroll

Three promises

01

Local by default

A Gemma 3 model runs beside the app on a loopback port. Your words are answered on your own silicon.

02

Encrypted at rest

One password locks the whole thing. While the app is locked, none of it is decrypted anywhere — not on disk, not in memory.

03

Shared only on purpose

Sharing is opt-in, per person, per topic. Everything is sealed on your machine before it leaves it, and expires after two weeks.

The app

Five surfaces,
one sealed file.

01 Journal

Write it down.
Watch it come back.

A timeline rail of entries with a five-dot mood scale and tags. People from your network are recognised as you type and become quiet entity chips.

  • Reflections Ask for a reading under any entry — the model sees only that page.
  • Entities Names link themselves to the people in your network.
  • Mood Five dots, no scoring, no judgement.

02 Questions

139 questions
you've never been asked.

Fourteen sections — self, philosophy, romance, sexuality, aesthetics, work, money, mortality. Sliders between named poles, multiple choice, open answers.

  • Any pace Answer three or three hundred. Or hit Surprise me.
  • Portraits Ask a finished section to be read back as a short portrait of you.
  • Private by default The exposed sections are never used as background context.

03 Network

The people in your life,
as a constellation.

A force-directed map of who you know and who knows whom. Drag the nodes around; select one and a glass inspector opens.

  • Mentions A 12-week sparkline of how often someone appears.
  • Ties Who knows whom, drawn rather than listed.
  • Notes An AI reflection on the friendship, grounded in your own entries.

04 Companions

Company that
never phones home.

Sage, Ember, Aria, Atlas and Nova are built in — or make your own with a sentence. Replies stream token by token while the model thinks.

  • On your machine Every token is generated locally.
  • Scoped They see what you chose to share, and nothing else.
  • Yours Write a companion in one line and keep it forever.

05 Sharing — opt-in

Let people in,
one topic at a time.

Your journal never travels. What can travel is a short summary of it, written by the model on your machine, on a topic you defined — and only to a person you approved for that topic.

  • You write the brief Each aspect is an instruction you can rewrite. Mood, work, what you're making, or something only you would think of.
  • Per person, per topic One friend sees how you've been. Another sees what you're building. Nobody sees a list of what they're missing.
  • Automatic or one at a time Let a topic flow to someone as it's written, or read every summary yourself before it goes anywhere.
  • Gone in two weeks Then deleted — by your machine, by the service, and by the storage bucket, on three clocks that don't depend on each other.

By the numbers

Designed for
privacy and quiet.

Bytes of your writing we can read
we hold sealed blobs, and no key that opens them

0

Questions across fourteen sections
answered at your own pace

139

Of inference run on your machine
cloud AI is opt-in, your own key

100%

Days a shared summary survives
then deleted, on three separate clocks

14

Runs on your machine

No cloud in the loop.
Thinking never leaves the machine.

On first run, kumulativ inspects your hardware, picks the largest Gemma 3 that answers quickly on it, downloads the weights once, and boots a llama.cpp server on a loopback port. From then on, thinking is a local matter.

weights

Gemma 3 — 1B, 4B or 12B, quantised Q4_K_M and sized to your VRAM or RAM.

selection

Chosen once at first run from a hardware probe; overridable at any time.

download

Fetched a single time from the model host, then cached on disk forever.

runtime

A llama.cpp sidecar process, started and supervised by the app.

acceleration

CUDA on NVIDIA hardware, Metal on Apple silicon, CPU everywhere else.

binding

Loopback only — the port is not reachable from your network.

at rest

One local file, sealed with XChaCha20-Poly1305 under a key only your password unwraps.

password

Stretched with Argon2id on your machine. Never stored, never transmitted, never recoverable by us.

keychain

Remembering a device stores the file's key in your OS keychain — never the password.

backup

Copy the file. It is useless to anyone without your password.

telemetry

None. No analytics, no crash pings, no first-run beacon.

accounts

Not needed to write. An email-verified account only if you opt into sharing.

sharing

X25519 per pair, sealed before upload. The service stores ciphertext and holds no key.

metadata

It does see who follows whom, and when you publish. That part we cannot hide, so we say it.

cloud AI

Optional, with your own API key — and labelled as the trade it is.

How it works

From download
to first entry in minutes.

No workspace to configure and no invite to wait for. Install it, choose a password, let it size a model to your machine, and start writing.

  1. 01

    Install

    Download the .dmg or the Windows installer. One human check, then a private link that expires in ten minutes.

  2. 02

    Set a password

    It encrypts everything the app keeps. Nothing about it leaves your machine, which is also why nobody can reset it for you.

  3. 03

    First run

    kumulativ probes your hardware, picks a Gemma 3 that answers quickly on it, and pulls the weights once.

  4. 04

    Write

    Everything after that is offline — unless and until you decide somebody should hear how you've been.

Download

Take it home.

Free. No account needed to write, no telemetry. One human check, then a private, time-limited link.

binaries live in a private bucket · links are signed and expire in 10 minutes