coming soon

private chat.
verifiable.

your chats stay on your device. your queries run inside tamper-proof hardware. every response is cryptographically signed — and verified on your iphone before you read it.

xchacha20-poly1305·intel tdx·nvidia gpu tee·swiftdata local
what the wire sees

this is what you type. this is what the wire sees.

both panes are from the live app. the left is what you type. the right is the same request, captured by the in-app debug panel, exactly as it leaves your iphone — all user content sealed before transit.

header
X-Client-Pub-Key
ephemeral key generated on your iphone for this session.
header
X-Model-Pub-Key
the model tee's key, verified via intel tdx attestation.
header
X-Encrypt-All-Fields: true
client and model derive a shared secret via ecdh. the gateway routes ciphertext but can't read it.
body
every content, name & arguments is a sealed blob
structural metadata (role, model) stays plaintext — it contains no user data.
tool
even tool names are encrypted
the gateway can't see what tools you're calling.
header
X-Client-Pub-Key
ephemeral key per session.
header
X-Model-Pub-Key
the tee's key, verified via tdx attestation.
header
X-Encrypt-All-Fields: true
client+model derive a shared secret. gateway routes ciphertext.
body
every content is a sealed blob
only role and model stay plaintext — no user data.
tool
even tool names are encrypted
the gateway can't see what tools you're calling.
settings → developer → debug panel · open it any time to verify.
security

up to seven cryptographic checks. every reply.

before any response reaches you, teemoon verifies the hardware it ran on, the chain of trust above it, and the signatures on the bytes themselves. the math runs on your iphone — not on a server you have to trust.

all 7 checks passed
verified just now · 142 ms on device
gateway hardware
tdx quote signature
intel tdx confidential compute
ok
intel certificate chain
root → platform → quote, full chain
ok
signing key bound to hardware
gateway key derived inside enclave
ok
encryption
end-to-end encryption
xchacha20-poly1305, 256-bit keys
ok
model tee verified
nvidia gpu confidential compute
ok
model key proven on-device
session keys provable on-device
ok
runtime
response signatures
every chunk signed, verified inline
ok
providers

five doors. one private app.

switch models on a tap. bring your own key with zero markup. your device talks directly to each provider — no teemoon relay in between.

tee
near.ai

hardware-attested ai with end-to-end encryption. cryptography, not promises.

new
grok / xai

xai's truth-seeking models. grok 4.3 at lower prices, up to 2 million token context.

fast
fireworks

open-weights at speed. kimi, deepseek, glm, qwen, llama, and more.

web
brave answers

llm answers grounded in the live web with inline citations.

custom
byok

any openai-compatible endpoint. keys live in your keychain.
models

the best models. routed privately.

new models drop weekly. tee-attested when available. all of them tap-switchable inside one chat.

bring your own key. any openai-compatible endpoint works — plug in your preferred provider and model.

modelorgsizetee
glm 5.1z.ai754be2ee
qwen3.5alibaba122be2ee
grok 4.3xai500b—
kimi k2.6moonshot1t—
deepseek v4 prodeepseek1.6t—
qwen3.6 maxalibaba1t+ moe—
minimax m2.7minimax230b moe—
near.ai
glm 5.1
754b · z.ai
e2ee
qwen3.5
122b · alibaba
e2ee
xai
grok 4.3
500b · xai
fireworks
kimi k2.6
1t · moonshot
deepseek v4 pro
1.6t · deepseek
qwen3.6 max
1t+ moe · alibaba
minimax m2.7
230b moe · minimax
brave grounding

web search, with receipts.

agentic search runs in parallel. results land as inline citations and source chips you can tap. nothing is hallucinated from a year-old training cut.

model-driven queriesnear-realtime resultsno trackinginline citations
tool: web_search·fresh:pw → 71.2s
"shimokitazawa indie show calendar may 2026"
1shelter — may 6 / 7 / 9 lineupslivehaus.jp
2monthly schedulebasement-bar.net
3tokyo indie weekly digestnote.com
4@shimokita_livetwitter.com
4 sources cited inline
zero data collection

we built it so we couldn't read it, even if we wanted to.

no accounts. no telemetry. no cloud sync. chats live in swiftdata on your iphone — full stop. the gateway sees ciphertext; the model runs in a tee. keys never leave the tee.

0
accounts created
0
analytics events
0
bytes stored on our servers
∞
chats kept on your device
faq

questions, answered.

yes. every message is encrypted with xchacha20-poly1305 before it leaves your device. keys are derived inside the gateway tee and proven to your iphone via attestation. our infrastructure handles only ciphertext — we physically cannot read your messages.