Ballast
Personal assistant for Android

A personal assistant that's actually private.

Everything you'd want it to do, without handing over your data. Ballast reads your email, turns it into to-dos, texts you reminders you can answer, and warns you when something looks like a scam.

Private beta Free during the beta. Paid later, never ad-supported. How it stays private
BallastToday
From your emailElectric bill, $84.20, due Thursday. Want a reminder Wednesday evening?
not now, ping me in 20
Will do. I'll check back at 1:42 PM.
SecurityThis morning's "bank" email came from a look-alike address, not your bank. Don't open the link.
Draft reply to Sarah"Thursday works. See you at 3."
SendEdit

Example conversation

To-dos from your inbox

Bills, deadlines and replies you owe, found as soon as you connect Gmail.

Reminders you can answer

Reply "later" or "ping me in 20" and Ballast reschedules.

Scam and account alerts

Phishing, password resets you didn't ask for, and breach notices.

Replies you approve

Ballast drafts. Nothing is sent until you tap Send.

Below the waterline · how it's designed

Your phone keeps your information. A sealed AI does the thinking.

Ballast splits the work in three, so the smart part never holds your data. Ballast is in private beta, and we'll publish technical details as each part is finished.

On your phone

The vault

Your email, tasks, reminders, chat history and memories are stored only on your phone, encrypted with keys held in its secure hardware.

In a sealed enclave

The brain

For each task, your phone sends only what that task needs to an AI model running in hardware-protected confidential computing. It's designed to answer without storing your data.

On your phone

The hands

When you approve an action, your phone carries it out. The AI never sees your passwords, payment details or logins.

Vault → only what the task needs → verified enclave → answer → back to your phone

Your phone checks the seal firstThe enclave proves which software it's running. If the proof doesn't match the approved version, your phone sends nothing.

Encrypted all the wayRequests are encrypted so that only the verified enclave can read them, not us and not anyone in between.

Ground rules

What Ballast never does

  • AdsWe don't sell your information or use it for advertising.
  • TrainingYour email and chats are never used to train AI models.
  • SendingNo email goes out, and nothing is bought or deleted, without your explicit tap.
  • StorageYour email and chats are not stored on our servers.
Google user data

Ballast uses Gmail access to read messages for to-dos and security alerts, and to send email you approve. Ballast's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Details are in our privacy policy.