My Thought Safe is a journal you can talk to. The AI runs on your own computer, everything you write is locked in one encrypted file, and the app has no network code at all. Its memory brings back what matters from months of conversation, so your diary never runs out of room.
Download the installer, portable zip or AppImage. It’s unsigned for now, so on Windows choose More info → Run anyway.
Download a GGUF chat model such as Qwen2.5 7B Instruct Q4_K_M from Hugging Face into a folder of your choice.
Choose where the file goes and how it opens: a passphrase, a security key, or both. Write the passphrase down.
Point the app at your model folder, pick the model, and choose Use this model.
Choose + New conversation and type. Then go to Settings → Backup and make your first backup.
Cloud chatbots are good listeners, but everything you tell one is stored on a stranger’s computer. And local models forget everything once a conversation outgrows them. My Thought Safe fixes both.
There is no server to trust, because there is no server. The app contains no networking code, and you can block it at the firewall to check.
Every model can only read a fixed amount of text at once. My Thought Safe rebuilds that page before each reply, so you get the benefit of an unlimited context without needing one.
A 7B model reads maybe 8,000 tokens at a time — a few pages. Your diary will be thousands of pages. Before each reply, the app decides which of them matter right now.
It isn’t magic. A small model can still miss things, and the meter never hides that. Read the details →
A deliberately focused app: a place to write, an AI to write with, and strong locks around both.
No sockets, no update checks, no analytics, no crash uploads. The model runs locally, and the app works identically with the network unplugged.
Check it yourselfAES-256-GCM on every record, with keys derived by Argon2id. Titles, personas, memories and settings are encrypted too, and each record is bound to its place so it can’t be moved or altered unnoticed.
Security claimsOpen a vault with a passphrase, a FIDO2 key such as a YubiKey, or both together. Enroll a backup key or backup passphrase, and change the unlock method later.
Unlock optionsThe vault locks after a period of inactivity you choose, instantly with Ctrl+L, when its drive is unplugged, and whenever anything unexpected happens.
LockingA failed unlock says only “Did not unlock” — never which factor was wrong. Outside the vault there is no settings file, no recent-files list and no cache.
Privacy tipsRun the portable build from a USB drive. Settings, personas and model choices live inside the vault, so the app itself leaves nothing behind on the host.
Portable modeTalk for as long as you like. A rolling summary and targeted recall keep a months-long conversation coherent on a model with a small window.
How memory worksPin any reply or type a fact — “My daughter’s name is Mira” — and it stays in view for the rest of that conversation.
Managing memoriesIf you allow it, the AI jots down lasting facts it picks up from your conversations. Every note is visible, and you can edit or delete it.
NotesAsk about “the trip last month” or “the very first thing I asked”, or click an entry’s timestamp to point the AI at exactly that entry.
Referencing entriesEach memory belongs to its conversation, so a work journal doesn’t leak into a private one. Share a memory across all conversations only when you choose to.
Memory scopeA color-keyed meter under every conversation shows how the model’s window is spent this turn: persona, pinned facts, summary, recalled memories and recent history.
Reading the meterUse any GGUF chat model — Qwen, Llama, Mistral, Gemma and others. The app estimates whether a model fits your graphics card before you load it.
Choosing a modelAutomatic GPU acceleration through Vulkan, with the rest of the model on the CPU when it doesn’t all fit. A split bar shows how much landed where.
GPU & CPUGive each conversation its own character: a patient listener, a blunt coach, a study partner. Save favorites as presets to reuse.
PersonasAdjust temperature, reply length, context window and GPU layers for one conversation without touching the others.
Conversation settingsStreaming replies with proper formatting, a collapsible view of a reasoning model’s thinking, and answers to a numbered list by just typing “3”.
ChattingDrop a small embedding model into your model folder and memory search works by meaning, not just keywords. It’s detected automatically.
Embedding modelsOne click writes an encrypted copy of your vault, then reads it back to prove it opens. A backup is simply another vault.
BackupsCheck every encrypted entry for damage. The vault keeps a spare copy of its header, so a damaged header doesn’t take the vault with it.
Checking a vaultExport pinned facts and notes to a separately encrypted archive, and import them into another vault or conversation.
Export & import
A graphics card makes replies fast, but it isn’t required. Without one, the model runs on your processor: slower, and just as private.
Windows 10 and 11 (64-bit) and modern x86-64 Linux. No macOS build yet.
Full requirements| NVIDIA GPUs | Accelerated via Vulkan Tested |
|---|---|
| AMD GPUs | Accelerated via Vulkan Untested |
| Intel GPUs | Accelerated via Vulkan Untested |
| Any x86-64 CPU | Always works as the fallback |
AMD and Intel cards run through the same bundled Vulkan engine as NVIDIA, but nobody has confirmed them on real hardware yet. Expect them to work; if one isn’t picked up, the model runs on the processor instead.
A privacy tool that oversells itself isn’t one. These are the trade-offs.
Lose your passphrase or key and the vault is gone for good. No reset, no backdoor, no support ticket. Keep a backup key or a written passphrase somewhere safe.
No outside party has reviewed the code, and the source isn’t published. What you can do is take the app itself apart. The license explicitly allows it, and the security page lists checks anyone can run.
Encryption protects the file at rest. It can’t stop malware, a keylogger or someone reading over your shoulder while the vault is open.
