Free
$0forever
One shelf slot, cloaked on-device, and enough asks to see if the library is for you.
- 1 library slot — add, cloak, and read on-device
- 25 AI actions / month
- Ask · Summarise · Redline
- Signed, offline-verifiable receipts
Pricing
Pay for the reading, never for privacy.
The library, extraction and on-device review are free. You pay the upstream model's cost plus our markup when requests are relayed to a model; text in the request has been reviewed on-device, though values can be missed. No free-relay games, no reselling your documents. Start free; upgrade when the shelf needs more than one slot.
Personal
$12per month
For the reader who keeps a real shelf — contracts, case files, chapters, notes.
- Unlimited client-side library (IndexedDB, on your device)
- Everything in Free
- Priority models + longer documents — planned
- All three services on every document
- Receipt history across your devices — planned
Business
$29per seat / month
For legal, research and compliance teams who read named documents all day.
- Everything in Personal
- 1,000 premium-model actions / month — planned
- Per-seat billing — planned
- Shared cloaking + retention policy — planned
- Countersigned custody receipts + compliance kit — planned
Honest answers
What exactly am I paying for?
The upstream model's tokens, plus a small markup that keeps the gateway and this reading room running. The on-device extraction, cloaking, the detection model and the receipts cost you nothing.
Is anything free forever?
One library slot with on-device extraction and storage, and 25 AI actions a month in this app, no account needed. Detected values are replaced before sending; values may be missed. The paid tiers use the same detector and receipt format.
Do you ever see my documents?
The original document file stays in your browser. When you ask, cloak-docs sends a request to the gateway with text reviewed on your device. Detected values are replaced with stand-ins; values the detector misses may go as written. The receipt hashes the text produced by review, not the complete network request.
Where does my library actually live?
In your browser's IndexedDB. Clear your browser storage or use a different device and the shelf is empty again — there is no server copy to delete because none was ever made.