Memory
It learns you in small pieces. You can read every one of them.
The landing page shows you that Tobey remembers. This is the part worth reading before you tell it anything: what it keeps, where that lives, what it costs you, and the switch that takes any of it back.
What it holds
Four tiers, and only one of them is read every time.
A memory you pay for on every single turn has to earn it. So the things Tobey always knows about you are kept deliberately few, and everything else is filed under a heading that costs about three tokens until a question is actually about it.
- Spine
- Loose facts with no heading yet — the things true of you in any conversation. 30 facts · read every turn
- Topics
- A label and a one-line gist. Metadata only — a topic never holds the fact itself. 40 · ~3 tokens each
- A topic’s facts
- Opened only when the conversation goes there. Overflow is paid by that topic, so an eleventh remark about the gym can never push out the one thing known about your health. 8 per topic · on demand
- Rules
- Standing instructions, in their own block that tells the model these ARE instructions. Oldest out — a rule lost to age is one you have already replaced. 6 · read when any exist
~340facts it can hold, against 40 before the index existed — and a typical turn costs the same or less than it used to.
Where it actually lives
One encrypted document. Never a row per fact.
The obvious design
A table with one row per remembered thing. Encrypt the text and it looks safe — but the row count, and the timestamp on each one, sit in plaintext right beside the ciphertext. Anyone with the database can see how much Tobey knows about you and when it learnt each piece, without decrypting a single word.
What we do instead
Every fact, topic and rule is one JSON document inside a single encryptField ciphertext. What leaks is the existence of one row and one updatedAt. The shape of what you have told it is not something we are willing to publish, even to ourselves.
How it learns
It notices. Then it asks.
Tobey watches what you change on the card before you press Save. Three identical corrections inside thirty days, with nothing contradicting them, and it will raise it with you — as a question.
- 01
You correct the same thing, three times
Not three similar things. The same field, changed the same way, on three separate confirm cards — and none of the three contradicting each other. The evidence is encrypted, bounded and evictable like everything else.
every time · “Groceries” → “Home” - 02
It shows up as something noticed, not something known
A proposal, re-derived from the evidence each time the page loads. It is never stored, so it cannot quietly become a fact while you are not looking.
“Something Tobey noticed” · /settings/memory - 03
Your tap is what makes it true
Save, and it becomes an ordinary memory — visible, editable, deletable, and subject to the same limits as every other one. Say no thanks and the evidence is forgotten, so the same three corrections can never propose it again.
Nothing is ever acted on by inference. A signal becomes a suggestion; you are what turns a suggestion into knowledge. That is the same rule as the rest of the product — Tobey drafts, you press.
The locked tier
Some of it we cannot read. Including us.
A passphrase you choose seals a private tier. We hold two wrapped copies of the key and neither opens without something only you have — which means losing the passphrase loses the contents, and we would rather say that plainly than keep a way in.
- The keypair
- X25519, one per account. The public half is stored in plain, so Tobey can seal a NEW private memory while the vault is shut — writing never needs your passphrase.
- The private half scrypt · N=2^16
- Never stored. Two independently-salted wraps are: one under your passphrase, one under a recovery code.
- Minimum 10 characters ~363 ms
- It derives a key that has to survive an offline attack on the stored wrap, which is a different job from a PIN on a door.
- Voice is always locked
- The voice gateway posts with a service token and no cookies, so it can never present a key. That is the right answer for a room with other people in it.
- Turning it off keeps everything
- It needs the passphrase, because it opens every sealed fact BEFORE dropping the wraps. The other order loses them for good, silently.
How it talks
Four dials. Then it sounds like someone you’d actually talk to.
Most assistants have exactly one voice, and it belongs to nobody. One person wants telling straight; the next wants sitting with. Tobey asks — and the same sentence comes back differently. Move anything below.
No dial can cross this
Whichever they picked: never say something is fine when it is not, never invent praise, and never let warmth talk you out of naming a real problem. A friend who only ever agrees is no use to them.
These are the four questions Tobey actually asks in your first minute — and you can change any of them later by telling it a reply landed wrong.
Your side of it
All of it is yours to read, change or burn.
Read every fact
Not a summary of what it knows — the actual list, with the topic each one is filed under.
Edit or delete any of them
Including the ones it proposed and you accepted. A memory it learnt is not a different class of thing from one you typed.
Take the lot with you
The export carries your memory along with everything else, on every plan including the free one.
The sealed tier is the one exception, and it is the exception on purpose — how that works