What stays home, and what leaves
Walter lives on your computer. We don't store your conversations. Here's where words do go.
Stays on your device
- Listening for its name. Nothing is sent until you say it (or reply right after it speaks, or in its first minute after start-up).
- Speech recognition and its voice, by default.
- Its memory: lists, reminders, notes and logs, as plain files you can read and delete.
- Face and voice recognition, only for people who agree: numeric templates, never photos or recordings.
- The camera: off by default. If on, it only checks whether someone is in the room. No frames stored or sent.
Leaves your device
| To | What | When |
|---|---|---|
| Anthropic (Claude) | Your request's words, the memory it needs, and what it reads for you | Each time it thinks, on your own plan and terms |
| OpenAI | Audio or text for cloud speech | Only if you switch it on with your own key |
| Calendar, mail or files you allow | Only if you connect an account; nothing sent without your yes | |
| Cloudflare | Encrypted phone-app traffic | Only with remote access |
| Weather, sports, podcasts | Rough location, team names, searches | When those features run |
| Us | Nothing by default; your waitlist answers (and a confirmation email, sent through our email provider) | When you sign up or ask for help |
Never
- We never see your Claude login, or resell Claude access.
- No selling data, no ads, no training AI on your household.
- This site has no trackers, cookies or third-party scripts.
The honest trade-off
An AI agent that reads web pages and email can be tricked by them. So Walter gets its own machine, admin access starts off, and spending, messages, locks and alarms need your spoken yes. A more restricted permission mode is planned before public launch.
Full draft privacy policy.