fak10
How Anna protects your data
Your knowledge lives encrypted on your iPhone, not with us. The big AI only comes in when you switch it on, and then your text goes straight from the iPhone to Amazon Bedrock, never through our server. Three figures show what talks to what.
What talks to what on the iPhone
your iPhone
Form in Safari
fak10 extension · reads fields and page address
form → Anna↓→fields, no valuesAnna → form↑←fills in, after “Release”
Anna
understands your sentences and fills forms, offline
↕↕Anna ↔ storereads and writes
Store
AES-256 encrypted
↑→keychain → storeopens the store
Keychain
key on this device only
↑↑Face ID → keychainopens
Face ID / passcode
only while the iPhone is unlocked
↓→store → backupbackup
iCloud backup / backup file
store encrypted only; filed originals sit in the iCloud backup under Apple’s protection
↓↓backup → new iPhoneopens only with your passphrase
new iPhone
store is back
- Anna understands your sentences on the device, even offline.
- The store is encrypted with AES-256. The key sits in the Keychain, on this device only and only while it is unlocked. Face ID or the passcode opens it.
- The file from “Export backup” is fully encrypted. In the device’s iCloud backup the store is encrypted only; filed originals sit there under Apple’s protection. On a new iPhone, only your passphrase opens the store.
- Forgot the passphrase: nobody can recover it, not even us.
- No account, no fak10 server holding your knowledge, no ads, no tracking, no location. Usage signals only with your consent and without content.
Anna fills in forms for you, on your iPhone. fak10’s Safari extension hands the app only the field labels and the page address, never values. Anna looks up matching values in your store, you check them and tap “Release”. Only then do they go into the form. Anna never enters anything you put under “Never into forms”.
Chatting with the big AI: who writes, who reads
your iPhone
You
write in the chat
↓↓you → chatyour message
One chat
AI, Anna and you in one thread
↓←chat → big AIyour lines, max. 20 min
Big AI
Claude in Amazon Bedrock (EU, in the beta), only when you switch it on
big AI → chatthe AI’s answer, into the chat
big AI → Annayour questions, verbatim, to Anna
big AI → Reviewsuggested facts
Anna
answers from your knowledge
Review
nothing counts without your OK
Document
file or web page shared to fak10
document → big AIcontent, only after “Send”
document → Reviewresults wait under Review
The AI never sees
- facts or people from your store
- Anna’s answers
- your answers to Anna’s questions
- One chat, two streams: the app shows the AI’s answers (violet) and Anna’s (light blue) with your lines (orange) in one thread.
- The AI gets your text and your own lines from the last 20 minutes, plus its own earlier answers.
- It answers itself, passes your question sentences verbatim to Anna and suggests facts. Anna answers from the store on the device.
- Suggestions land under “Facts” › “Review”. Nothing becomes knowledge without your confirmation.
- Documents and web pages: you share them to fak10 and see a preview with the price. Only “Send” sends the content and the names of your classes and relations, except secret ones. The results also wait under “Review”.
- “Read with Anna” works for text files without AI and without credits.
One AI request, step by step
fak10 app
you start the AI yourself
Credit server (fak10)
Amazon Bedrock (EU, in the beta)
app → credit server
① Ask for a price: kind, size and pseudonymous ID, no content
credit server → app
price in credits
app → credit server
② Request a key, with App Attest proof from Apple
credit server → app
credits reserved, Bedrock key for a few minutes
app → Bedrock
③ your text with the key, straight to Bedrock
Bedrock → app
answer back to the app
- There is no API key in the app. The first time you use credits or the AI, the app registers an App Attest key with us. With it, Apple confirms that this is the genuine, unmodified app on a real iPhone.
- ① Price: the app names only the kind (chat or document), the size and its pseudonymous ID; that gives the price.
- ② Key: the credit server checks the proof, reserves the credits and issues a signed Bedrock key. It allows model calls only and expires after a few minutes (20 at most). Only what is used is charged; the rest returns.
- ③ The app calls Bedrock directly. Your text never passes through our server.
Who sees what:
- Credit server (fak10): a pseudonymous ID from Apple (in the beta it can be the vendor device identifier Apple assigns), balance, purchase receipts, the App Attest proof, kind and size of the request and your App Store country, never content.
- AWS: your text, to answer. AWS does not train on it and does not pass it to Anthropic. AWS may retain content for abuse detection; images are automatically checked for child sexual abuse material.
- Our Bedrock log: metadata only. Text, image and video content is switched off in it.
Feedback from the app works differently: its text is stored encrypted on our server at AWS in Stockholm. Because our team consists of AI sessions using Claude by Anthropic, it goes to Anthropic in the clear for this, secret entries included. Details are in the privacy policy.
In the beta there is a starting balance; purchases are Apple test purchases only, no real money flows.
Full details are in the app privacy policy.