The Privacy Manifesto

The bargain we never agreed to

Every mainstream browser today is a data extraction pipeline dressed up as a product. Chrome renders pages and, in the same breath, streams behavioral telemetry back to an ad-tech empire. Edge does the same for Microsoft. Even the browsers that market themselves as "AI-first" quietly ship your prompts, your tabs, and your context to cloud endpoints you never asked to trust.

That is the bargain: convenience for surveillance. And it is the bargain we reject.

Local AI is not a feature. It is the architecture.

TMRW runs its models on your machine. On Apple Silicon, inference happens on the Neural Engine, memory-mapped through the Secure Enclave, with zero packets leaving the device for any reasoning step. Summarize a page, draft a reply, simulate a transaction — all of it computes locally, at the speed of your hardware.

This is not a privacy toggle buried in settings. It is the default, and it is the only mode. There is no cloud fallback because there is no cloud collector.

What we do not collect

• No browsing history telemetry.
• No prompt logging, ever.
• No wallet fingerprinting, address correlation, or intent mining.
• No third-party analytics SDKs. Not one.
• No "anonymized" usage packets that de-anonymize the moment three of them arrive.

The cloud AI browser is a category error

A browser that ships every keystroke to a remote model is not an AI browser. It is a keylogger with autocomplete. The distinction matters because the threat model is different: cloud inference means your queries live in someone else's compliance regime, someone else's subpoena inbox, someone else's training corpus.

Local AI reverses that. The model comes to your data — your data does not go to the model. It is the same shift email made when PGP moved encryption to the endpoints, and it is the only shift that makes an agentic browser safe to actually use.

Agents you can audit

TMRW's agents run inside a permissioned runtime you control. Every on-chain intent is simulated locally before signing. Every off-chain action is scoped to a policy you wrote. When an agent acts, you see the receipt — and so does no one else.

The promise

No ads. No tracking. No telemetry. No cloud reasoning. No compromise.

This is the browser we wanted to use. So we built it. If your intent belongs to you, TMRW is where it stays.