Pricing

Pay for the reading, never for privacy.

The library, extraction and cloaking are on-device and always free — you only ever pay the (markup-only) cost of relaying a sealed question to a model. No free-relay games, no reselling your documents. Start free; upgrade when the shelf needs more than one slot.

Save 2 months on annual billing.

Free

$0forever

One shelf slot, cloaked on-device, and enough asks to see if the library is for you.

  • 1 library slot — add, cloak, and read on-device
  • 25 AI actions / month (shared suite pool)
  • Ask · Summarise · Redline
  • Signed, offline-verifiable receipts

Business

$29per seat / month

For legal, research and compliance teams who read named documents all day.

  • Everything in Personal
  • 1,000 premium-model actions / month
  • Per-seat billing
  • Shared cloaking + retention policy
  • Countersigned custody receipts + compliance kit

Honest answers

What exactly am I paying for?

The upstream model's tokens, plus a small markup that keeps the gateway and this reading room running. The on-device extraction, cloaking, the detection model and the receipts cost you nothing.

Is anything free forever?

Yes. One library slot, cloaked and unlimited on-device, and 25 AI actions a month once you connect a free CloakAPI wallet — drawn from the shared suite pool. Same detector, same receipts as the paid tiers.

Do you ever see my documents?

No. Only sealed text reaches the gateway, and only when you press ask, summarise or redline. We can't read your documents because they never leave your browser — the receipt attests it.

Where does my library actually live?

In your browser's IndexedDB. Clear your browser storage or use a different device and the shelf is empty again — there is no server copy to delete because none was ever made.