Antelope
WKWebView, privately.
Tabs, reader, downloads, HTTPS-Only, DuckDuckGo by default, tracking-parameter strip, and Private Mode that actually clears local traces. It still does not hide you from websites.
iOS 18 · iPhone and iPad
The page stays here.
A full browser with an assistant that runs on the device. There is no account. There is no analytics SDK. Cloud AI is off until you turn it on.
- Never Use Cloud — default
- No account
- No tracking domains
- Data Not Collected in the privacy manifest
- On-device models optional
A browser, then an assistant.
Safari-grade chrome was the floor. The assistant only sees what you ask it to, and only where you allow inference to run.
Ask the page, not the network.
Summarize, compare tabs, extract what’s on screen. Untrusted page text is split from system instructions. The agent previews tools and will not bypass CAPTCHAs, paywalls, or DRM.
Models that live in Files.
Apple Foundation Models when the hardware has them. llama.cpp GGUF on a physical iPhone or iPad — you download Q4 weights; they are never bundled. Simulator cannot run GGUF.
A store you can hold.
SwiftData is local, CloudKit off. Memory is encrypted. Encrypted backup is a file you export, not iCloud. Widgets never show Private Mode URLs. Spotlight indexes bookmarks you saved, not history.
Intelligence without an audience.
Three places inference can run. Only one is on unless you change it.
On this device
Demo, Apple Foundation Models, or a GGUF you installed. Page contents stay in RAM and the local store. This is the default path.
A machine you name
Optional OpenAI-compatible / Ollama host on your network. Data leaves the phone. The app says so, every time, with a network log.
Cloud, if you insist
Never Use Cloud until you add a key, change policy, and authorize the session. HTTPS only. No silent “improvement” pipeline of ours — we don’t have one.
Memory you opt into
Assistant memory is off until you allow it. Private Mode never writes it. You can delete everything from Settings without opening a ticket, because there is no ticket.
What this is not.
Quiet software should still be honest. These claims are false, and we do not make them.
- Not anonymous. Private Mode is not Tor. Sites still see a browser on a network.
- Not a VPN product. Optional IKEv2 talks to a server you provide. We do not operate a tunnel.
- Not uBlock. Tracker defense is WebKit rules plus system prevention — a slice, not a full blocker.
- Not counsel-reviewed. The policy and terms describe this build. They are not legal advice.
- Not magic. Demo mode is a simulation. Small local models are not world oracles. Outputs can be wrong.
Built like a product, not a demo.
- Platform
- iOS 18+ · iPhone and iPad · Swift 6 · SwiftUI · no private APIs
- Assistant
- Streaming local generation, source chips, confirmed agent, page actions
- Privacy
- PrivacyInfo: Data Not Collected, tracking off. Keychain for secrets. Store excluded from iCloud Backup
- llama.cpp
- Device-only XCFramework. GGUF validated on download. Metal, then CPU. RAM-safe refuse
- Daily driver
- Closed tabs, desktop site, zoom, tracker shield, system AutoFill, share, widgets
- Mark
- Umbra — a crescent of light. What you still see, after everything else is in shadow
Leave nothing
for the room next door.
Read how the binary actually behaves. Then decide.