Private by design.
Your personal knowledge is encrypted before it is stored. For the client-encrypted vault path, the service stores ciphertext and metadata—not the key that opens it.
🤫 AGENT ONE
Most software asks you to hand over more context. Hussh starts from the opposite premise: your agent should help you without turning your life into someone else’s inventory.
It listens when invited, explains what it needs, and stays quiet when it has nothing useful to add.
Your personal knowledge is encrypted before it is stored. For the client-encrypted vault path, the service stores ciphertext and metadata—not the key that opens it.
When an app needs information, it should name one narrow purpose and ask. You can approve, deny, or revoke; the request is not a blank check.
Your agent can work with the tools and systems around you. The point is a better outcome—not a new place for your data to be copied forever.
“Shh” is the promise of discretion. Its shape also reads as One: one human, one assistant, one clear place to decide what happens next.
Zero-knowledge describes encrypted personal-memory custody—not every possible processing path. A user-approved, scoped service workflow can have a different boundary; we say so before it happens.
Ask in your own words. One keeps the relationship and brings in bounded specialist work when it helps.
A useful answer should show what it used and admit when a source, tool, or capability is unavailable.
When a task affects a connected system, the action is a separate, explicit decision—not something assumed from the conversation.

Give your private agent a name. Keep the decision yours.