Owned by one. You.
One Puppy is built so the most private, capable thing in your life answers to a single party. Privacy here isn't a policy - it's the silicon your agent runs on, and it never sells you out.
It runs on hardware you own
The 🤫 One Agent lives on the Puppy you bought - iPhone, Mac, Pixel, Galaxy, or a desktop supercomputer. Your life isn't uploaded to be useful.
Consent is scoped and revocable
Outside agents never touch your data directly. Your Puppy shares the smallest scope, for the shortest time, and only after your tap.
A ledger only you can read
Every interaction and consent is written to a private ledger on your device - a perfect, portable memory of who touched what, owned by exactly one party: you.
Your data is never the product
We collect only what we must - your platform, who you are, your region, your email. Never rented, shared, or sold. That restraint is the whole company.
Discover. Request. Approve. Read.
Discover
An outside agent finds the capability - without seeing your data.
Request
It asks for a specific scope, purpose, and duration.
Approvethe gate
You review and approve with one tap. Deny, and nothing moves.
Read
Only that scope, only that window - then it's gone, on your ledger.
See consent and your ledger in action.
Approve, deny, revoke: the consent gate
Every outside request stops at your tap. See how to approve, deny, and pull access back.
Watch & read the lesson →Reading your private ledger
A perfect, private record of who touched what - and how to read it.
Watch & read the lesson →The most personal computer you'll ever own.
Reserve a One and see ownership by architecture for yourself - a private transparency log you can read, and an agent that asks before it acts.