Features · Privacy
Your computer. Your work. Your call.
The agents run on a Mac you own, on your own files. Nothing is copied to somebody else's computer to be worked on. How much leaves your own machines after that is for you to decide, down to nothing at all.
It runs on your Mac
Your projects stay where they are, and the agents work on them in place. That is also why the work is useful: it is done on the real project, with everything it needs already there.
Through Ripul: what most people use
Sign in on your Mac and your phone and they find each other. It works from a hotel, a train or a client's guest Wi-Fi, and every part of Ripul is available.
What passes between your phone and your Mac travels through servers we run, protected on the way.
Direct: when it has to stay between your devices
For work under a confidentiality agreement, or a client's project, your phone can talk straight to your Mac with nothing in between. Your files, conversations and screen never touch our servers. You choose this for each conversation, so sensitive work can go direct while everything else does not.
It takes some setting up, and a direct conversation goes without a few things: the command line, saved plans and tools, inviting other people, and notifications.
How a direct connection is protected
- Private on the way
- The connection is encrypted from end to end.
- Only your phone
- Your phone proves itself with a key that is made on the phone and never leaves it.
- The Mac checks everything
- Every request is checked by the Mac itself, whatever the app is showing.
- Yours to withdraw
- Remove a phone from your Mac at any time, and it has to start again.
All the way: only your own machines
A direct connection settles how your phone reaches your Mac. It does not settle who does the thinking. With Claude or Codex, what you ask still goes to the company that runs the model, as it does in their own apps.
A model you run yourself settles the other half. Choose a local model in a direct conversation and both questions have the same answer: your phone, your Mac and your model, with nobody else in between.
You decide one conversation at a time. The work under a confidentiality agreement stays on your machines, and everything else still gets the best model there is. A model you can run yourself is less able than the largest ones, so keep it for the work that has to stay.
- Signed in, with Claude or Codex
- What most people use. The conversation travels through Ripul, and the thinking is done by the AI company.
- Direct
- Nothing passes through Ripul. The thinking is still done by the AI company.
- Direct, with a local model
- Nothing goes to Ripul, and nothing goes to an AI company.
Good to know
What still reaches outside
Ripul and its updates are downloaded from us. And an agent you ask to look something up on the web will go to the web.
Guests see one conversation
Someone you invite sees that conversation and nothing else of yours.
Saved conversations are shared with the project
A conversation saved beside the work can be read by anyone who can see that project. You can turn saving off.
The Ripul SDK: put an agent inside your own iPhone or Mac app, and build that app the way Ripul is built.