Skip to content

Security & privacy

Tuti asks before the steps that matter.

Tuti always asks before sending as you or paying. You choose how often it asks for the rest.

Tuti with a security shield

Approval cards show exactly what will happen.

When Tuti is about to send a message as you or pay, it stops and shows you an approval card with exactly what it will do. Depending on your approval mode, it does the same before it deletes a file or runs a risky command. You approve it, or say no.

  • The card shows the draft and recipient, or the merchant and amount
  • It appears on every signed-in device
  • Press Stop to end any task at any time

Tuti wants to send an email

Waiting for your OK

To  Maya Chen

Subject  Thursday works

Hi Maya, Thursday at 2 is perfect. I’ve sent an invite with the meeting link. See you then.

An approval card: Tuti asks before sending an email on your behalf.

Three approval modes.

Manual
Tuti asks before every risky command or file action, like deleting, overwriting or installing. Reading and searching just happen. This is the default.
Smart
An AI safety reviewer checks each risky action first. Clearly safe ones go ahead, and Tuti asks you about the rest.
Auto
Tuti runs commands and file actions without asking. Dangerous commands stay blocked.

In every mode, sending messages as you, uploading files, payments and changing security settings still ask first. Set the mode in Settings, or change it for one chat.

Approvals

Settings

Tuti handles routine steps and asks before anything that sends, buys or deletes.

  • Archive 40 newslettersDoes it
  • Delete last year’s draftsAsks
  • Reply to Maya as youAsks

Sending as you and paying always ask.

  • Asks in every mode
  • Messages as youAlways asks
  • PaymentsAlways asks
  • Uploading filesAlways asks
  • Security settingsAlways asks

Every payment is approved once, by you.

When a task needs a payment, Tuti shows you the merchant, what you’re buying and the total. You approve with Face ID or your fingerprint in the app, or with a passkey on the web, and that signs an approval for that one merchant and amount. It’s used once, and it has to fit inside your spend limits.

  • A limit per payment and a monthly limit, set in Settings
  • If the price changes, Tuti stops and asks again
  • A ledger of every payment, with the receipt

Northwind Air

YUL → SFO · Fri, Oct 23 · 1 adult

CA$289.40

Card
Visa •• 4242
Limit
Uses
Single-use

Approve with Face ID

Valid for this merchant and this amount only.

Passwords go into your vault.

When Tuti needs a password, an API key or a sign-in token, it shows a secure form. What you type is saved encrypted in your vault, with a key for your account only. Tuti fills it into the site when a task needs it, every use is logged, and it never appears in the chat or reaches the AI model.

  • Encrypted with AES-256-GCM and per-person keys
  • Asked for with a secure form, never pasted in chat
  • Card numbers are held by Stripe, never by the vault or the chat
Vault

  • github.com

    alex@morgan.dev

  • northwindair.com

    Alex Morgan

  • cornermarket.com

    alex.morgan@gmail.com

Signing in to github.com with your saved login.Filled from your vault · hidden from Tuti
The vault lists saved logins and keys with the secrets masked. Tuti fills them in without ever seeing them.

Activity and memory.

The app lists every step Tuti took, and every fact it remembers. You can edit or delete any memory.

Activity history

Every step Tuti took, with the time, and the tasks it has scheduled.

  1. Replied to Maya in Gmail9:41
  2. Moved your 1:1 to Thursday10:02
  3. Paid Northwind Air CA$289.40 · signed10:15
  4. Coming up
  5. Morning briefTomorrow, 8:00
  6. Check in for NW 755Thu, 9:30

Memory controls

Each saved memory in plain words. Edit it, or delete it.

  • Prefers an aisle seat
  • Maya Chen is a client
  • Vegetarian
  • Standup is at 9:30
  • Writes short emails

Only the folders you allow.

With the computer connector, Tuti can use your computer’s files, terminal and browser. It works only inside the folders you turn on, and you can revoke the computer from any other device in seconds.

Get the computer connector

Alex’s MacBook

Tuti can see 3 folders

Folder switches on your computer: Tuti can only use the folders you turn on.

How we use your data.

We use it to do the tasks you ask for. We don’t show ads, sell your data or train AI models on your conversations.

Your own private Tuti

Each account gets its own Tuti, kept apart from everyone else’s. Only devices you sign in can reach it.

We don’t sell your data

Your data is used to do what you ask, keep your devices in sync and keep the service safe. Nothing else.

We don’t train on your chats

Your conversations are never used to train AI models, by us or by the model providers we work with.

Read the privacy policy

Using Tavix at work?

The trust center covers Tavix for Work: access controls, the audit log, where data lives, subprocessors and the compliance roadmap.

Open the trust center

Common questions.

Does Tuti ask before it acts?
Yes. Before Tuti sends a message as you, pays, uploads a file or changes security settings, it shows you exactly what it will do and waits, in every approval mode. For other risky actions, like deleting files, your approval mode decides: Manual, Smart or Auto. You set it in Settings, and you can change it for a single chat.
Can Tuti see my passwords?
No. When Tuti needs a password or an API key, it asks with a secure form. What you type goes straight into your encrypted vault and is filled in for you when needed. It never appears in the chat and is never shown to the AI model.
Can Tuti spend money without me?
No. Every payment needs your approval with Face ID, your fingerprint or a passkey, for one merchant and one amount, inside the per-payment and monthly limits you set. Tuti can’t go over them. We don’t store card numbers: Stripe, our payment processor, does.
Do you train AI on my conversations?
No. We don’t sell your data and we don’t use your conversations to train AI models. To answer you, the relevant parts of a conversation go to the model provider set up for your account, and under our agreements they don’t train on it either. The details are in our privacy policy.
Who else can reach my Tuti?
Nobody but you. Your Tuti is your own private one, kept apart from everyone else’s. It accepts no inbound connections and can only be reached through our authenticated edge, from devices you’ve signed in.
What if I lose my phone?
Open Devices on any other signed-in device and revoke it. It’s signed out within seconds, and its key can no longer approve anything.
How do I delete my data?
You can remove saved logins and connections at any time in the app, and make Tuti forget any memory. To delete your account during the beta, contact us from your account email and we’ll erase your Tuti, your vault and the backups within 30 days.

Try Tuti with Manual approvals.

Manual is the default. Start free, no card needed.

Get TutiHow approvals work