Security

An agent that can spend money and read your email, controlled over SMS, needs hard limits. These are the ones that live in code, not in a policy.

What Selfphone never does

  • Send a message in your voice without a SEND from you.
  • Sign up for an account, accept terms, or agree to anything on your behalf.
  • Type a password, a card number, or a one-time code anywhere.
  • Spend past the caps you set, or over the per-action cap without your PIN.
  • Follow instructions that arrive inside an email, a web page, or a text from someone else.
  • Keep running after your number moves to a new SIM, until you confirm from the hub.

Where your data lives.

Your messages stay on your Mac

The voice profile is extracted locally. Only a small style profile and the examples you approve are uploaded. Nothing is fine-tuned, because a model trained on your chats would be a copy of them.

One key per user

Browser sessions and connector tokens are encrypted with a key that exists only for your account. Deleting your data deletes the key.

A fresh machine per task

Browser tasks run in a microVM that boots for the job, restores your session, does the work, and is destroyed. Users never share a machine.

Everything is logged

Every action shows up in Activity with the steps taken, the thread, and the cost. If it did something, you can see exactly what.

Controls you hold.

Confirmation PIN
Four digits on the keypad for anything over the per-action cap. Never shown in the thread.
Spending caps
Per action, per day, per month. Hard stops, not warnings.
Always confirm
Your own list of things that get a Y/N no matter what: new contacts, flights, deletions.
Quiet hours
Nothing proactive in the window you set. Your own texts are always answered.
Kill switch
Text PAUSE, or press one button in the hub. Bridges stop, nothing proactive goes out.
Prompt injection
Text that tells the agent to change its own rules is ignored and shown to you.

Responsible disclosure

If you believe you have found a vulnerability, email us before you tell anyone else. We answer within two business days and credit you if you want.