Counsel
Privilege is a duty, not a setting. A transcript on a vendor’s disk is a disk you do not control, and a demand that is not only yours to answer.
For counsel, clinic, newsroom, and the closed room
Not a single bit leaves your home.
Wear a stone. Forget it is there. Later, ask for any sentence that was actually said. Transcription and understanding run on a box in your house. There is no cloud copy, because there is no cloud.
Join the waitlist
First devices, 2027. No account. No subscription.
The room the cloud cannot enter
Some conversations are not allowed to leave the room.
Cloud pendants will transcribe a meeting. They will also keep it. Encryption is how they describe the keeping. For a product demo that is enough.
For attorney–client privilege, a clinical note, a source, or an unreleased number, “we keep it encrypted” is still “we keep it.”
Urda is for people whose work makes the cloud product unsellable. Not because they dislike convenience. Because the duty is older than the product.
The sentence we can stand behind is not “your data is safe with us.” It is: we do not have your data.
Clinic
A consultation is not a training corpus. If the recording cannot leave the practice, a product that requires a cloud is not a product you can buy.
The chair
Therapy only works as a closed room. A third party, however careful, is still in the room.
The notebook
A journalist’s recording is a source. Sources are not objects in someone else’s bucket.
The closed door
Board, merger, unreleased figures. The meeting is the information. The cloud is another copy.
The only claim that matters
We do not have your data.
This is not a privacy feature bolted onto a cloud product. It is the definition of the product. There is no account to create, nothing to sync, no subscription to lapse.
Audio moves from the stone on your person to the box in your house. That is the whole path. The line that would go onward — to us, to a model API, to a backup you did not ask for — is not drawn, because it is not wired.
Competitors encrypt what they hold. That is a real promise, and it is not this one. We cannot encrypt what we do not have, lose what we do not have, or be asked for what we do not have.
And it is enforced, not promised: the software refuses to start if you point inference at a public address.
Wearable to the box at home. Phone asks the box. Nothing in this drawing points at us, because nothing in the product does.
URDA_LLM_URL = <public address> → refused to start
points at public address — inference must stay local
URDA_LLM_URL = 127.0.0.1:8080 → ok
transcribe 1.4s · daily recap 6.1s · offline: true
Real output from the boot guard. Every release is tested with the network unplugged.
Two sentences
They keep it, encrypted. We never have it.
The cloud pendant
“We encrypt what we hold.”
A real promise. The recording still lives on computers that are not yours. Encryption describes the keeping. It does not undo it.
Urda
“We never have it.”
The recording lives on a box you own. If we were served tomorrow, there is nothing of yours to produce. We never received it.
Already carrying one
Bring the last two years with you.
You may already own a recorder that sends everything to someone else’s servers. Leaving it does not have to mean losing what it heard.
Export your archive, hand the zip to your Base, and it becomes searchable on a machine you own. No new hardware. Nothing to wait for. This is also the cheapest way to find out whether asking your own past a question is worth anything to you — before you buy a thing.
We do not write a parser for any one company’s export format. We have never held one of those files, and a schema written from hearsay would break on the first real archive — quietly, and in a way nobody could debug.
So the Base sorts by what a file is. Audio gets transcribed. Subtitles and transcripts get read. JSON gets inspected for something that looks like speech. Whatever it cannot read, it lists by name. Silently dropping half of your archive would be the worst possible way to begin — by then you have probably already cancelled the other subscription.
Without being asked
You should not have to know the question.
A recall product that only answers questions serves the people who already know what to ask. After a two-hour meeting most people do not have a question. They have a feeling that something was agreed.
So Look also shows the day unprompted: the threads it was actually about, and the things you said you would do. Every one of them carries the sentence you said and the minute you said it — tap it and the timeline scrolls to that line.
And where a line cannot be traced back to something you really said, we say so rather than dress it up.
A thread point that cannot be anchored is dropped — a map should be all true. A commitment that cannot be anchored is kept and marked unanchored — failing to surface something you really promised is worse than showing it without a timestamp. The asymmetry is deliberate, and it is the whole difference between this and a model writing a confident summary of your day.
What it is
Three parts. Remove one and it stops working.
Stone 记石
A recorder the size of a coin. One microphone, one button, a week of battery. No screen — and no radio. It hands its recordings over on the dock, through the same cable that charges it.
It never thinks, and it never transmits. There is no wireless stack in the firmware to turn off.
Base 记座
A small machine that sits in your home. Transcription, indexing, understanding — all of it happens here.
Not for models, not for backup, not for updates you didn’t ask for.
Look 回头看
One page on your phone. A timeline, and a box to ask a question. It answers with what was actually said.
It is never a chat window. A chat box is an admission that we didn’t know what to build.
Wear it. Forget it. Ask later. There is no app to open, no session to start, no model to choose.
Hardware, not a setting
Off is a break in the wire.
A microphone that can only be muted in software is a microphone you have to trust. Stone has a physical switch that cuts power to the capsule.
Off is off — including if the firmware is wrong. That is the restraint we can put in the object. The rest of the restraint is yours: recording law differs by country and by state; in some places every person in the conversation must consent. Knowing those rules is your responsibility. We will not pretend otherwise.
Version one
A meeting. Any sentence. Verbatim.
We are not claiming to record a life. Not yet, and not honestly. The first version does one thing completely.
Wear it through a sixty-minute meeting. Afterwards, ask for any sentence — verbatim, with what came before and after. Ten seconds. Now pull the network cable out of the Base and ask again: nothing changes. Using Urda never requires unplugging anything — that is simply how you can check us, without reading a line of our code. This is the acceptance test. If it fails, we do not ship.
Voice, marked
Sound, then stone.
The wearable does not interpret. It collects. Meaning is made later, at home, on a machine that does not have a route to us.
What we removed
Most of the work was deciding what not to build.
- No cameraA microphone makes a room uneasy. A camera makes it hostile. And describing images needs a model we refuse to rent from a cloud.
- No screenAdd a display and you are competing with the watch already on that wrist — and losing a week of battery to do it.
- No chat windowYou get a timeline and one question box. That is the whole interface.
- No cloud accountNothing to register, nothing to sign in to, nothing for us to lose in a breach.
- No subscriptionCharge monthly and you must hold the customer’s data hostage. We sell you a device instead.
- No plugin storeA product that does five hundred things does nothing.
- No notificationsIt never speaks first. It is a memory, not a roommate.
The cost of the promise
If the box dies, the memory is gone.
That is the honest cost of a product with no cloud. You can back Base up to a drive you own, and we will never make that difficult. We will not quietly copy your life to our servers so that we can charge you to get it back.
For transcription, local models are now as accurate as anything you would rent. For summarising a day, a model running on a box in your house is meaningfully weaker than the largest cloud models. We are not going to pretend otherwise. We think that trade is worth it.
Your memory lives on hardware you own the way a notebook lives on a desk. Lose the notebook, lose the notes. The difference is that nobody else had a photocopy.
This is stated as a fact, not as a virtue signal. Some people need a cloud copy. They should buy a cloud product. Urda is the other object.
Questions we get
The honest answers.
What about the people around me?
This is the hardest problem with this product, and it is not a technical one. An always-listening microphone makes the people near you uncomfortable, and no amount of local processing fixes that. Our answer is restraint and a hardware switch: Stone cuts power to the microphone — not a software toggle you have to trust us about. Recording laws differ by country and by state; some require every person in the conversation to consent. Knowing and following those rules is your responsibility.
What happens if my Base dies?
You lose the memory. That is the honest cost of a product with no cloud. You can back Base up to a drive you own. We cannot recover it, because we never had it.
How is this different from the other AI pendants?
They process recordings on their servers and charge monthly for the privilege. That is not a flaw in their execution — it is their business model, and it is the one thing they cannot change. Their privacy sentence is that they encrypt what they hold. Ours is that we hold nothing. Both are real products. Only one of them can be sold into a room that is not allowed to leave the room.
Why is a local model good enough?
For transcription, local models are now as accurate as anything you would rent. For summarising a day, a model on a home box is weaker than the largest cloud models. We would rather name the trade than hide it. Verbatim recall of a meeting is the job. A dazzling paragraph is not.
Will there be a camera later?
Not until it can be understood on your own hardware. The moment we add a camera that needs a cloud to make sense of what it sees, the promise on this page is void — and the promise is the product.
Can I run my own model?
Inference has to stay on your network. Point the box at a public address and it refuses to start. That check is in the software, not in a policy we ask you to trust.
Waitlist
Be there when it ships.
Leave an email and we will write once when there is something real to show — a working device, a date, a price. Not a newsletter.