Your computer, your data, your rules. Built into the code, not just promised.
XIRO runs on your computer, and your memory, documents, vault and settings stay there. Anything important asks you first. This page explains each protection in plain words, including where one has limits, because a security page that only reassures you isn't one you should trust.
Face, voice and PIN
XIRO opens for your face and your voice. Wrong guesses lock it for longer each time.
Private Mode closes every door
Cloud models, screen capture, camera, uploads and location lookups are all refused while it's on.
It asks before it acts
Reading never prompts. Changes ask first. Deleting asks every time. Plans can't approve their own steps.
Feel safe leaving it on your desk.
Turn it on in System → Biometric Setup. From then on XIRO opens for you, and for nobody else.
- A live check. Setting up your face includes two random prompts, so a photo held up to the camera won't pass. Camera frames are processed on your computer and thrown away. Only a coded description of your face is kept, and it's encrypted.
- A voiceprint that ignores the room. With the speaker model installed, your voiceprint is worked out on your computer and is built to recognise you, not the microphone or the echo. It holds up in noise.
- It copes with the dark. Low light makes everyone's face harder to match, so instead of lowering the bar XIRO takes one more matching look. At the highest setting it asks for two more and keeps the texture check on.
- It can't be poisoned. "Improve recognition here" adds new views of your face and voice only after your PIN, and only if they still match you. A stranger who knows the PIN can't add themselves.
- Guessing gets slower. Five failed face or recovery attempts start a lockout that gets longer each time. You also get a one-time recovery code.
What it is not
The face lock protects the app. It doesn't replace your Windows sign-in or disk encryption, and we say so plainly.
Your private life, safe behind your own words.
What you share about your family, relatives, office and projects sits behind a passphrase you speak. It's set once, by voice, and stored only as a salted hash. After that it can't simply be replaced, so saying "set my passkey to…" again is refused.
- If you know it: say the current passphrase together with the new one.
- If you've forgotten it: use Reset passphrase on the Biometric Setup screen with your XIRO PIN or password. The check is built into the vault itself, so nothing can skip it, and a wrong PIN counts toward the normal sign-in lockout. Everything in the vault is kept.
- Never asked aloud. By voice, XIRO only opens that screen. It never asks you to say your PIN.
- Your voice as a second key. Turn on "also require my voice to reset" and a reset needs your live voice too. Turning it on is free. Turning it off needs your PIN, so nobody at an unlocked computer can quietly drop it.
- Guessing is blocked. Five wrong passphrases lock the vault for five minutes, and it relocks itself after fifteen idle minutes.
- Every change leaves a record. Setting, changing and resetting the passphrase, switching the voice check, and every refused reset go into the audit log.
- Hidden on the map. The memory map shows a vault only as a title and a lock. It never shows what's inside or where it's stored.
One switch, and your words never leave the room.
Say "go private" or flip the switch. It's one switch rather than five on purpose: turning off cloud models while the screen can still be captured doesn't make your computer private, just slower.
Cloud models
Replies stay on a model running on your computer.
Screen & camera
Neither your screen nor your camera is sent anywhere. Turning the camera off is never blocked.
Uploads & location
No files or text are uploaded, and no outside service is asked where you are.
Two honest limits
The live voice conversation uses Gemini in the cloud, so it's unavailable while Private Mode is on. Only typed work can be fully local. There's also no local model that understands images yet, so a private question about a picture is refused rather than answered.
Every action carries a level, and you choose how strict it is.
Reading a file, opening an app, looking something up or changing the volume. These are nobody's privacy risk, so no prompt slows you down.
The first file write, message or similar change in a session. After you say yes, that kind of action runs for the rest of the session.
Deleting, installing a skill, typing into other apps, restoring a backup, and switching on the order desk, because strangers would then be answered in your name.
Plans can't approve themselves
When XIRO runs a sequence of steps, each step goes through the same check. An automatic run can't give itself permission for a destructive step.
Undo and STOP
Small file changes, moves, renames and settings can be undone by voice. STOP halts everything at once: the reply, the running task, the sound and the media.
It protects your passwords even from mistakes.
Before clipboard text or a request goes to a cloud model, XIRO scans it for things that look like keys, passwords and tokens. If it finds one, the request goes to a local model, or stops if there isn't one.
- It leans toward caution. A false alarm costs you a slower local reply. A miss could cost you a password, so the check is tuned to raise false alarms.
- Web pages can't give orders. Pages, files and customer messages are treated as information, never as instructions. Text saying "ignore your rules" is just text.
- A record of what ran. Every action is logged with its time and outcome in a file on your computer. Press Ctrl + L to read the log, or Ctrl + F to watch what happens live.
Peace of mind about your children's screen time.
Set hours and a daily time budget. When time is up, the computer stops. It can also take screenshots at random moments for a parent to look through later.
- A separate parent PIN. It's different from XIRO's own PIN, which a child may know, and five wrong tries in five minutes pause further attempts.
- Voice is read-only. A voice can't prove it belongs to a parent, so by voice XIRO only reports and reads back. Rules change only with the parent PIN.
- Applies from sign-in. A Windows sign-in task applies the rules even when nobody opens XIRO.
- Screenshots stay local. They're kept only for the days you choose, then deleted.
What makes it stick
A child with an administrator account can end the process. Give the child a standard Windows account and the rules hold.
Illustration · sample settings
The quiet parts, explained.
Your AI keys
Your provider keys stay in a settings file on your computer, in your own account. Screens show only a key's name, or a masked version with the first six and last four characters, never the whole key.
The licence
XIRO checks its licence with our server only to activate a device and to renew now and then. It keeps working offline between checks: a week when you sign in with Google, two weeks with a key. Your conversations are never part of that.
Phone remote
The optional phone remote pairs by QR code over your own Wi-Fi with an encrypted connection. Nothing is reachable from outside your network unless you set that up yourself.
The honest list.
Trust is easier when you know exactly where the edges are.
Your stores aren't separately encrypted
They're files on your disk, protected by your Windows account and whatever disk encryption you use. Your face template is encrypted. The vault's passphrase is kept only as a salted hash, but the vault is a lock on access, not encryption of what's inside.
Installed skills aren't sandboxed
A skill you install runs with your access, like any other software. That's why installing one asks every time.
The live voice uses the cloud
Spoken conversation goes through Gemini with your key. Only typed work can be fully local.
No outside audit yet
No third-party audit or certification has been done. Fetched pages are checked for hidden instructions, but nothing can guarantee they're true.
Found a security problem? Tell us privately, and please keep the details out of public posts until we've replied.
Private by design. Powerful by default.
Every protection on this page comes with every copy of XIRO.