1
Connect
Mail, calendar, files, notes and your apps. You pick the accounts, folders and scopes; change them any time.
How it works
Agents that work for you, ask before they act, and keep your private things private.
The short version: you connect what you choose, a crew of agents does the reading and drafting, and you approve anything that touches the outside world. Your most sensitive data can stay on your own Mac.
The daily loop
2
Read and brief
Agents triage overnight and write your morning brief: what matters, what's drafted, what needs you.
3
Approve
Drafts, bookings and clean-ups arrive as cards. Approve, deny, or undo within the window.
4
Improve
Overnight, the crew reviews the day and proposes better routines. You decide what sticks.
Agents and models
The right agent, and the cheapest model that does the job well.
Your chief of staff routes each job. Triage goes to a fast model; most conversation to a workhorse; deep reasoning only when you opt in. Every answer shows which class replied and what it cost.
Use included credits, bring your own Anthropic, OpenAI or OpenRouter key with no markup, or run a local model on your Mac through the Gus Bridge.
| Job | Model class | Credits |
|---|---|---|
| Sort 100 emails | Fast | 5 |
| Quick question | Fast | 1 |
| Chat with an agent | Workhorse, cached | 4 |
| Morning brief | Workhorse, batch | 6 |
| Plan a complex project | Deep (opt-in) | 40 |
| Anything, with your key | Your choice | 0 |
Approvals
Anything that sends, deletes, spends or changes the world waits for your tap.
- Approve, Deny and Undo on every outside-world action
- Strictness levels (strict, middle, standard) for what happens inside Gus; there is no bypass mode
- Spend caps on by default; single actions over 50 credits always ask
- An audit log of what each agent did, and when
- Instructions hidden in emails or files can't trigger actions: acting tools always need your click
● Needs your approval · Ava
Send reply to Jordan Lee
Thanks Jordan, Friday works.
I'll send the notes before then.
Try it. Nothing is actually sent.
Local-first: the Gus Bridge
Your Mac stays yours.
The Gus Bridge is a small, signed macOS helper. It reads only the folders you pick, syncs Apple Notes and Reminders, and runs local models for private work. It connects out; nothing connects in.
Your MacGus Bridge: folders you pick, Notes, local models
outbound only
RelayRoutes by account and device; stores no payloads
signed results
Gus cloudChecks flags, plan, allow-list and approvals
Pair with a code
An 8-character, single-use code that lasts 10 minutes. The device key is created in your Mac's Keychain and never leaves it.
Allow-listed actions
Only actions in the published manifest can run. Paths are confined to the folders you chose; anything that writes asks on your Mac first.
Unpair instantly
Remove a Mac and its key is revoked at once. Signed and notarised builds update themselves securely.
Data separation
One account. Separate apps. Separate data.
You sign in once, but each app keeps its own data in its own store. Apps only share short event titles with your brief, never the details behind them.
- Gus Finance: a separate database for every customer
- Gus Family: each family's data is isolated by access rules; kids' details never reach a hosted AI model
- Gus Shop: one isolated instance per creator; your buyers are your customers
- Gus: row-level isolation per account, with a leak test in every release
Gus ID · one sign-inIdentity, plan, credits and notifications
Financeown database
Familyown rules
Shopown instance
Into your brief“Statement due Thursday” · “3 family events today” · “2 new orders”
Security overview
Built to be trusted with your life admin.
A summary of the controls planned for launch. The full security page, sub-processor list and data processing agreement will be published before paid launch.
🔐 Encryption
Encrypted in transit and at rest. Connector tokens and your AI keys are sealed per account and decrypted only in memory when used, never logged.
🚫 No training
We never train AI models on your data. Hosted models get the minimum context a job needs.
🧾 Audit log
Every agent action, bridge action, export, deletion and staff access is logged, and you can see your own log.
👤 Staff access
Hardware-key sign-in for staff. Any support access needs a written reason, is time-limited, read-only by default and shows in your audit view.
🧱 Hardened web apps
Strict content security policy, single-use sign-in tokens between apps, CSRF protection and rate limits on every app.
💾 Backups and tests
Point-in-time backups with monthly restore drills, automated security scans every release, and an external penetration test before paid launch.
📤 Export and delete
Export everything, or delete your account and data, from settings. No email chains.
👀 Hide sensitive
One switch blurs figures and names on screen across Gus, for working in public.
🧒 Children
Children are never account holders; parents control profiles, credits and the Studio. No ads, ever.
Found a security issue?
Please email security@gus.tarekkaraman.com (placeholder until the domain is chosen). We'll reply within two working days and credit you if you'd like.
See it for yourself.
Join the private beta, connect one account, and read your first brief tomorrow morning.