Aurora over the Pacific, from the ISS
Trending: 48k anonymous views today
memory.khensu.nu
your private AI.
it finds what you love, and tells no one.
- 0servers in the loop
- 0 bytesof your taste sent anywhere
- 4algorithms, all on device
- 2 stick, same size every time
It remembers what you’ve been told and finds what you love.
Everything runs on your iPhone, iPad or Mac.
Powered by Apple Intelligence and our own ñü.memory layer, all on your device.
Most apps send what you watch to their servers and rank your feed there. khėnsu.ñü does the opposite. Your device brings public posts, streams and places home anonymously, inside traffic that never changes, and decides on its own what fits you. What you like never leaves your phone, because there’s nowhere for it to go.
ñü.řåł · per-ankh, your memory
ask anything you’ve been told.
every answer shows its sources.
In ancient Egypt the Per-Ankh, the House of Life, kept the records. Yours lives on your phone: what you’ve said, heard and shared, searchable by words, meaning, people, places and time, and askable in plain language. Type ~catch-up in a busy group or ~summarize on a long thread.
It’s woven like Indra’s Net, the endless net of Hindu and Buddhist teaching with a jewel at every knot, each reflecting all the others. Every message, photo, note and voice memo is a jewel, and opening one shows the ones it touches. Ask for the whole picture and you see it at once, the way Krishna showed Arjuna every world in the Bhagavad Gītā. The net is woven on your device and never leaves it.
- Your conversationsMessages, voice notes, photos and the links people send you, so you can search them and ask about them.
- What matters in themPlans, dates, decisions, places and the things people asked you, each linked to the message it came from.
- Who and whereThe people, groups and places that come up, so “what did Sam say about Naxos?” just works.
- What you watch and readPosts, videos, live streams, forums and places, if you switch on your personal feed.
- Encrypted on your deviceAES-256 with a key the Secure Enclave never releases. Unreadable while your phone is locked; opened only after Face ID.
- Never backed up or syncedEach of your devices builds its own memory from your messages. The memory itself never leaves the device.
- Deleted with its sourceDelete a message, or let it disappear, and every fact and vector learned from it goes too.
- Leave any chat outOne switch keeps a chat out of your memory on your device.
algorithm 1 · recall
four searches at once.
one answer, with its sources.
Ask “When do we sail to Naxos?” and Per-Ankh searches your memory four ways in parallel: by the words, by what they mean, by the people and places connected to them, and by time. Each search ranks what it found. The lists are fused by reciprocal rank, so a message that several searches agree on rises to the top, then cut to what fits in the on-device model’s context. The model reads only that, and answers with links to each source.
WordsFull-text index, BM25
- ASam · “Charter confirmed: Naxos on 19 May”
- EAna · ferry from Naxos back to Athens
- FPhoto · Naxos harbour at dusk
- CCharter PDF · 12–19 May
MeaningOn-device embeddings
- ASam · “Charter confirmed: Naxos on 19 May”
- DSkipper · weather window, leave at 7:00
- CCharter PDF · 12–19 May
- BAna · voice note about Ios
ConnectionsNaxos and Sam, two hops
- ASam · “Charter confirmed: Naxos on 19 May”
- CCharter PDF · 12–19 May
- EAna · ferry from Naxos back to Athens
- DSkipper · weather window, leave at 7:00
Time“In May”
- CCharter PDF · 12–19 May
- ASam · “Charter confirmed: Naxos on 19 May”
- DSkipper · weather window, leave at 7:00
- BAna · voice note about Ios
Fused and cut to the token budget2,890 of 3,000 tokens for evidence
- ASam · “Charter confirmed: Naxos on 19 May”65.3
- CCharter PDF · 12–19 May64.0
- DSkipper · weather window, leave at 7:0047.6
- EAna · ferry from Naxos back to Athens32.0
- BAna · voice note about Ios31.3
- FPhoto · Naxos harbour at dusk15.9
algorithm 2 · your feed
scored on your phone.
by signals that never leave it.
Your device gathers candidates anonymously: new posts from people and forums you follow, live streams starting now, places, and what’s trending by anonymous counts. Then it scores each one against what it has learned about you. Your own rules and the label lists you subscribe to have the last word.
- Interest match 45%
- People you come back to 25%
- Freshness 15%
- Anonymous counts 15%
- 1Night sail from Paros to Naxosada.khensu.nu · video0.79
- 2Hercules Caves, Tangier360° live stream0.67
- 3Late set at the jazz cellarLive stream0.57
- 4Aurora over the Pacific, from the ISSTrending video0.37
- 5The Ibiza ferry trick nobody tells youPost · labelled misleading0.17
- –Election debate, liveHidden by your rule “no politics on weekdays”hidden
- Candidates arrive anonymouslyFollows, topics, live streams and places are fetched through the ticks and two-relay paths, so no node learns what you read.
- Trending without trackingLikes, reposts and views are anonymous tallies: one rate-limited proof per person per post, counted by nodes, attributable to no one.
- Labels you chooseCommunities, newsrooms and fact-checkers publish label lists. A label shows when raters who usually disagree agree, computed the same way on every device.
- Chronological by defaultThe personal feed is a switch. Off, the Feed is newest first from who you follow.
algorithm 3 · interests that fade
it forgets on purpose.
so yesterday doesn’t run your feed.
Every habit adds a little weight to an interest, and every interest loses half its weight every 14 days unless you come back to it. Saves and follows fade more slowly, losing half over 60 days. Sailing stays strong because you keep watching; the jazz streams from last month fade; Ibiza rises because you’ve opened it on the map four times this week.
Remove an interest and its weight goes to zero at once, and it won’t be learned again unless you add it back. Pause learning and every weight freezes where it is.
w(t) = Σ s · 2−(t − tᵢ) / 14 days
algorithm 4 · prefetch inside the ticks
already on your phone when you tap.
so tapping tells nobody anything.
Every 2 seconds your phone sends one burst of 4 sealed packets of exactly the same size, and gets 4 back. The first fetches your mailbox; the other three carry whatever is waiting: a message, a directory lookup, or the next feed candidates your device chose to prefetch. Empty slots carry cover. Prefetch follows a steady schedule, not your taps, so the post you open is usually already on your device, and opening it sends nothing.
Inside your phoneWhat each slot carries
On the wireWhat anyone watching sees
- Mailbox fetch
- Your message
- Directory lookup (PIR)
- Feed prefetch
- Cover
found for you
found for you.
fetched for no one.
The aurora from the ISS is trending by anonymous counts. Your device fetched it in its ticks, ranked it, and had it ready before you scrolled to it. Nobody learned that you watched it.
what it knows about me
you can see it.
edit it, pause it, or wipe it.
Everything your device has learned is on one screen, each interest with the plain reason it was learned: sailing videos you watch to the end, posts about Naxos you saved, Ibiza opened on the map four times this week, live streams from the Caves of Hercules in Tangier. Remove anything, and your feed changes at once.
- See what it knowsOne screen lists every interest it has learned, with the plain reason it learned it.
- Remove or addRemove an interest and it’s gone from your feed at once, and never relearned unless you add it back.
- Choose the signalsStop it learning from any habit: time spent, replays, saves, live streams or places.
- Pause or resetFreeze everything where it is, or wipe everything it learned in one tap.
with or without suñůlink.shield
works without the shield.
never goes quiet with it.
khėnsu.ñü works fully on its own. While the app is open, your phone sends the same-size burst every 2 seconds, so nobody can tell when you’re active. What changes is what happens when you leave the app.
iPhone on its own
A push wake-up: the extension fetches your messages in one standard burst.
iPhone with suñůlink.shield
Bursts from the shield’s own radio and battery.
without the shield
iOS suspends an app within seconds of it leaving the screen and stops its network activity. Only push wake-ups through the Notification Service Extension, short background tasks and transfers the system schedules can run. So the constant cover stops while the app is closed, and starts again when you open it.
Messages still arrive through push wake-ups, and the mixnet still hides who talks to whom. But someone watching your connection can see when the app is in use.
with suñůlink.shield
The shield is a node with its own battery, radios and processor on the back of your iPhone. It keeps the 2-second tick going while the app is closed and receives your messages in its own slots, then wakes the app over Bluetooth instead of Apple’s push service.
It carries your followed feeds so they’re current the moment you open the app, and relays for people nearby. Your traffic pattern never changes.
| iPhone on its own | With suñůlink.shield | |
|---|---|---|
| Works fully | Yes | Yes |
| Cover while the app is open | A burst every 2 s | A burst every 2 s |
| Cover while the app is closed | Paused; iOS suspends the app | Continues from the shield |
| Who talks to whom | Hidden by the mixnet | Hidden by the mixnet |
| When you use the app | Visible to someone watching your connection | Hidden: the pattern never changes |
| New messages while closed | Push wake-up through Apple | Bluetooth wake from the shield, no Apple push |
| Your feed when you open the app | Fills in over the first ticks | Already current |
| Relays for people nearby | Only in node mode | Yes, and earns as a node |
suñůlink.shield
a node on the back of your iPhone.
cover that never sleeps.
Titanium or solid brass, flush with the camera, with its own 14.0 Wh battery and a guard chip that holds the 2-second tick in hardware. Drag to turn it; on iPhone, view it in your space.
who sees what
no one sees both.
and we see nothing.
- The first relayKnows it’s you connecting. Can’t read what you asked for: the request is sealed for the second relay.
- The second relay or cacheKnows which public post or stream was asked for. Has no idea who asked.
- Someone watching your connectionSees the same-size bursts every 2 seconds while the app is open, and with suñůlink.shield, all the time.
- UsNothing. There is no khėnsu.ñü server in the path, no account history and no profile to look at.
An honest limit: someone able to watch a large part of the internet for a long time could still estimate roughly how much you use the network. They can’t see what you read, watch or like.
tech specs
tech specs.
- Devices
- iPhone, iPad and Mac with iOS, iPadOS or macOS 26. Search on every device; answers and summaries need Apple Intelligence (iPhone 15 Pro or later, iPad and Mac with M1 or later).
- AI model
- Apple Foundation Models, on device, with the Neural Engine. Private Cloud Compute is never requested. No Siri, no Writing Tools, no iCloud, no AI servers.
- Words
- SQLite FTS5 full-text index with BM25 ranking, offline, on every device.
- Meaning
- NLContextualEmbedding (multilingual, on device), stored as int8 vectors in the same encrypted database.
- Facts and connections
- Typed facts and entities extracted on device, each linked to its source messages; graph search up to two hops.
- Voice notes and photos
- SpeechTranscriber transcripts and Vision text and labels, searchable like messages.
- Recall
- Four searches in parallel, fused by reciprocal rank (k = 60), cut to a token budget for the 4,096-token on-device context.
- Answers
- Tool-calling session over recall, a few rounds of evidence, citations to the exact messages.
- Storage
- Encrypted SQLite with Complete Protection; key in the Secure Enclave; opened after Face ID. Never backed up or synced.
- Feed ranking
- On device: 0.45 interest, 0.25 people, 0.15 freshness, 0.15 anonymous counts; your rules and label lists last; at most two in a row from one person or topic. Chronological by default.
- Interests
- Half-life 14 days (60 days for saves and follows). Remove sets an interest to zero and blocks relearning.
- Network
- One burst every 2 s while open: 4 sealed packets of 10,248 bytes up and 4 down, about 72 MB per open hour each way. Directory lookups by PIR; objects up to 8 KiB in the ticks; larger ones through two relays, padded to power-of-two sizes from 4 KiB.
- Public counts
- Anonymous tallies: one rate-limited proof per person per post, counted by nodes, published per epoch.
- Labels
- Subscribable label lists; consensus labels shown only when raters who usually disagree agree, computed the same way on every device.
- Battery
- Estimate: 2–7% per open hour on cellular, about 0.5% on Wi-Fi.
- With suñůlink.shield
- Cover continues while the app is closed: about 11 hours on the shield’s own 14.0 Wh battery, longer on the cable from the box or a charger. Wakes the app over Bluetooth.
compared with server-side feeds
same goal: show you what you’ll love.
opposite place to do it.
a typical server-side feed
- What you watch, like and skip is sent to the company
- A profile of you is built and kept on its servers
- Your feed is ranked there, for time spent and for ads
- The profile stays with the company
khėnsu.ñü
- Public content is fetched anonymously, inside constant traffic
- What you like is learned and kept on your device
- Your feed is ranked there, by your rules
- You can see it, edit it, or reset it
There is no advertising, no profiling and no data sale (compliance). TikTok, Instagram and YouTube rank feeds on their own servers using activity they collect; they are trademarks of their respective owners, named only for comparison.
wellbeing
built to be put down.
nobody earns from your attention.
- Chronological by defaultNewest first from the people and forums you follow. The personal feed is something you choose.
- An end to the feedTurn off endless scrolling and the feed stops when you’ve caught up.
- Time limitsA daily limit for the Feed and live streams. When it’s reached, the Feed rests until tomorrow. Chats keep working.
- Why am I seeing thisEvery recommended post shows which of your own habits led to it, and you can remove that reason.
your memory. your feed.
only on your device.
Feed scores, interest weights and recall scores on this page are computed from the formulas shown. Battery figures are estimates; sunulink.shield runs about 11 hours on its own battery while relaying and keeps going on the cable from the box or a charger; battery life varies with use and settings. Wire rules in thespecifications: PROTOCOL 8.8 (ticks) and 9 (PIR), webe 5 (fetch), 8 (feeds) and 10 (labels). Apple Intelligence is a trademark of Apple Inc.