The AI that runs on your machine, not someone else's.

One calm screen for everything your AI is doing.

The control panel is black glass. Nothing flashes and nothing competes for your attention: colour appears only when something needs you, has gone wrong, or cannot be confirmed.

• Ten honest states. Listening, speaking, thinking, working, updating, muted, offline, needs you, error and unknown, each shown in words.
• Approvals in one place. Anything that would leave your machine waits in a queue until you say yes to that exact action.
• It tells you what it remembers. Ask "what do you remember about me" and see it, change it or clear it.
• Screen, mic and network, always labelled. If it can't confirm a state, it says unknown rather than guessing safe.

One private AI, from a one-dollar add-on to big hosted models.

Every edition runs the same system with the same rules: local where it can be, asking before it acts, and honest about its state.

Mental Gym: five strategy games against AI that learns.

Play chess, checkers, Reversi, Mines and Battle Fleet in your browser against six AIOS characters, from Maple (friendly, still learning) to JeffyAI (the strongest). No account and no download. Your records stay in your own browser.

Local by default. Connected only when you say so.

Most assistants send your words somewhere else and ask you to trust what happens next. Private AIOS inverts that: the work happens on your hardware, and every step outward is a decision you make.

You can always tell what it is doing.

The state comes from the layer that enforces it, never from the page drawing it — and the words are always shown with the colour, because a colour on its own is not a signal everyone can read.

An unknown state is never drawn as a safe one.

Most software resolves uncertainty optimistically. If a check has not finished, or a component did not answer, the screen stays green and you are told everything is fine. That is a comfortable default and it is the wrong one, because the moment a protection stops reporting is exactly the moment you need to know.

Private AIOS resolves the other way. A problem outranks an unknown, an unknown outranks a warning, and a warning outranks a clean result — so the most serious thing that is true is the thing you see. If the state cannot be established it says so plainly and waits, rather than guessing in the direction that looks better.

The same rule governs approvals. A request to act outside your machine is bound to the exact action shown to you, not to a general permission granted earlier. Approving one thing approves one thing.

We will not claim more than we can prove.

"Offline policy" is deliberately not the phrase "air gapped". The software refuses network egress by policy — it cannot verify that a machine is physically isolated, so it does not say that it is. Where a limit exists, the product states the limit.

One message when it ships. No list rental, and no third-party trackers on this page.