Here is the entire product in one sentence: nothing you say leaves the device.
Everything else — the hardware, the operating system, the models, the years of work — is engineering in service of that one line. If we get everything else right and get that wrong, we have built another thing that listens to you on someone else's behalf. If we get that right, the rest is detail.
It is worth saying plainly, because the defaults have gotten quiet enough that most people have stopped noticing them.
The defaults we stopped noticing
Consider what is already in the average room. A smart speaker that wakes on a word — which means it is always listening for that word. A television with microphones built into the remote, sometimes into the set. A car that knows where you drove, how hard you braked, and increasingly what the cabin sounds like. A shelf of connected devices, each with a sensor and a pipe to a server you will never see.
Each one sends something about you somewhere. And each one asks you to trust the destination — not the device in front of you, but the destination. A building you cannot visit, run by people you will never meet, governed by a policy that can change the week after you bought the thing.
We agreed to this one convenience at a time. None of it felt like a decision. That is exactly how defaults work.
It's a physics question, not a policy one
The reason this is hard to escape is not that companies are careless. It is that cloud-scale intelligence and in-room intelligence are two different physical arrangements, and the industry chose the first one.
If the compute lives in a data center, your voice has to travel there to be understood. The microphone is in your kitchen; the brain is in another state. The trip isn't a bug — it is the architecture. The privacy policy exists to manage a journey the design made necessary.
Move the brain into the room and the journey disappears. There is no transit to secure, no server log to subpoena, no retention window to argue about — because the data never went anywhere. This is not a stronger promise. It is a different shape. A promise can be broken; a trip that never happens cannot be intercepted.
What on-device actually buys you
So Aura runs on hardware that sits on your table. The wake word, the speech recognition, and the language model all run locally, on the device in the room, on an operating system we built from the ground up for exactly this — Continuum OS.
There is no account to create. There is no cloud setting to switch off, because there is no cloud path to begin with. Nothing is stored on a server — which means there is nothing on a server to breach, to hand over under a subpoena, or to quietly resell when the business model shifts. The safest database is the one that was never built. We did not build it.
The honest trade
This costs us something, and we would rather name it than pretend it is free. A model that runs in your room is smaller than one that runs in a warehouse of accelerators. There are real constraints — on size, on speed, on how much the device holds at once. We chose those constraints on purpose.
A slightly smaller intelligence that keeps your life to itself is, to us, obviously better than a larger one that files everything you say under your name somewhere you cannot see. Most of the engineering is the work of making that trade feel like no trade at all.
A machine that mostly stays quiet
There is a last thing, quieter than the rest. We are not trying to build a device that talks constantly. The design target is a machine that mostly stays quiet — that listens, keeps your room to itself, and speaks only when it actually has something to add. An assistant you can forget is listening, because in the only sense that matters, nothing is listening anywhere but here.
Nothing leaves the room. It is the name of this essay, the first line of the product, and the whole of the argument.
The Founders' list reopens on October 23 at 12pm ET. It is capped at 335 and will not be expanded; Founders get 33.59% off. If you want the private version of what everyone is about to have, that is where it starts.
— The AuraVision team