Security
An agent that can spend money and read your email, controlled over SMS, needs hard limits. These are the ones that live in code, not in a policy.
What Selfphone never does
- Send a message in your voice without a SEND from you.
- Sign up for an account, accept terms, or agree to anything on your behalf.
- Type a password, a card number, or a one-time code anywhere.
- Spend past the caps you set, or over the per-action cap without your PIN.
- Follow instructions that arrive inside an email, a web page, or a text from someone else.
- Keep running after your number moves to a new SIM, until you confirm from the hub.
Where your data lives.
Your messages stay on your Mac
The voice profile is extracted locally. Only a small style profile and the examples you approve are uploaded. Nothing is fine-tuned, because a model trained on your chats would be a copy of them.
One key per user
Browser sessions and connector tokens are encrypted with a key that exists only for your account. Deleting your data deletes the key.
A fresh machine per task
Browser tasks run in a microVM that boots for the job, restores your session, does the work, and is destroyed. Users never share a machine.
Everything is logged
Every action shows up in Activity with the steps taken, the thread, and the cost. If it did something, you can see exactly what.
Controls you hold.
- Confirmation PIN
- Four digits on the keypad for anything over the per-action cap. Never shown in the thread.
- Spending caps
- Per action, per day, per month. Hard stops, not warnings.
- Always confirm
- Your own list of things that get a Y/N no matter what: new contacts, flights, deletions.
- Quiet hours
- Nothing proactive in the window you set. Your own texts are always answered.
- Kill switch
- Text PAUSE, or press one button in the hub. Bridges stop, nothing proactive goes out.
- Prompt injection
- Text that tells the agent to change its own rules is ignored and shown to you.
Responsible disclosure
If you believe you have found a vulnerability, email us before you tell anyone else. We answer within two business days and credit you if you want.