Conversation
Your workspace.
Real device state. No cloud data has been uploaded.
Loading device state…
Off. Accounts and sync aren't available yet.
Device-only encrypted storage. Unlock inside the app.
No model loaded on this page.
Export ordinary data and the encrypted vault separately.
Guest mode is active.
No account has been created. Cloud sync is off. Your current data has not been uploaded.
Accounts and sync are not available yet. Sign-in will appear only after the real provider is configured and tested.
Planned design
Ordinary notes, reminders and drafts will sync only after you opt in. Chats and vault secrets remain local. Server-readable sync will be labelled clearly.
Preparing model...
Ask a question, or type /help.
- /remember
- Save a note
- /recall
- Find a saved note
- /remind
- Set a local reminder
- /search
- Search Wikipedia
- /read
- Open a text draft
- /write
- Save a text draft
Model answers can be wrong. No messages, purchases or posts are made for you. /search sends your query to Wikipedia.
Saved notes
Only notes you choose to save. No automatic memory guessing.
Reminders appear while this page is open. Missed reminders appear when you return.
Repeating scheduled notes
A deterministic note, not an unattended AI job. At most one overdue note is shown after downtime.
Text drafts
Device-local text drafts. No access to other files on your computer.
Passwords and keys, kept separate from your AI. Nothing from this vault enters a prompt or a network request.
Use at least 12 characters. Forgotten password means no recovery.
Backups and limits
Technical details
AES-256-GCM encryption with a master-password key derived using PBKDF2-SHA256, 600,000 rounds. A strong unique password matters. Forgotten password means no recovery. Auto-locks after 5 minutes without vault activity or when this tab is hidden.
Device-local only, no cloud sync. General app backups do not include the vault. Export its encrypted backup separately. To import, lock the vault and enter the backup's master password above first.
Export, import and reset
Browser storage can be evicted. Export backups. Import replaces device-local data only after confirmation. Local companion data is in ~/.pocket-worker.
Qwen2.5 1.5B runs on your device, with optional 0.5B fallback through WebAssembly. No API key, credit card, account automation or paid fallback.
What leaves your device
Chat prompts, notes and drafts stay in this browser or the local companion; sign-in alone does not upload them. Opening the site and downloading the model share normal request metadata with GitHub, jsDelivr and Hugging Face. Wikipedia search sends your search query to Wikipedia. There are no cloud AI calls or app-added analytics trackers. Optional sign-in stores account session tokens in this browser.
Search and sources
/search topic queries Wikipedia only, with source links. It is not a general web search or a completeness guarantee. Retrieved text is untrusted data and cannot run actions.
Cloud AI
Not active. A compatible provider and use case must be verified before cloud AI can be enabled. No API-key input, stored cloud key, or cloud-model requests in this version. Local AI remains the engine.
Two local models
The default Qwen2.5 1.5B Q4_K_M download is 1.117 GB. It is more capable than 0.5B on published benchmarks, but still a small, error-prone model, not a frontier assistant. The 491 MB model remains available from its own button if the larger model fails or is too slow. Loading the fallback is a separate download. Keeping both uses about 1.61GB for weights alone, plus app/runtime files. The app uses a conservative short-context limit. Long messages or notes can be rejected; clear the conversation or shorten them. Accuracy is limited: an arithmetic follow-up failed during testing. Loading can use several GB of RAM; weaker devices may not run either model. Multiple turns, reload with saved history, stopping generation and model switching passed on the hosted origin. The larger model completed real hosted-origin inference in Chrome reporting an 8GB device-memory class, but crashed in a roughly 2GB test environment. CPU first-token delay can exceed a minute. Use the smaller model on low-memory devices; a renderer crash may require reopening the page.
Platforms and what is tested
The web page is designed for browsers on Windows, macOS 11+, Linux, Android 10+ and iOS 17+. Use an up-to-date browser available for your OS. Notes, reminders and drafts do not need the AI model.
Both models use more RAM than its download size. Browser storage may be evicted. Android, iOS and Safari AI inference has not been tested. Automatic external compatibility runtimes are disabled; unsupported browsers can fail to load. This is not a promise that every phone can run the model.
Optional desktop companion
Windows 10+ amd64, Linux amd64/arm64 and macOS Intel/Apple Silicon builds are in the setup ZIP. It records reminders while the page is closed only while the companion is running and the computer is awake. No native phone app or phone companion; phone reminders need the page open.
The larger-model install is no longer under 1GB. Download size is not a RAM cap. No cloud sync, account access or unattended AI is added by any platform build.
Privacy and terms
Privacy policy · Terms and disclaimer. These pages explain the app; they do not protect you from every legal claim.
Open software and source notes
Qwen model, Apache 2.0 · wllama, MIT. Updated October 12, 2026. No proprietary prompts or private conversation history are included.
This describes the current Pocket Worker app. It does not describe a cloud AI service or promise anonymity.
What you put in the app
Conversations, saved memories, reminders, repeating notes and workspace drafts are stored on your device. Browser mode uses IndexedDB for ordinary app data, separate localStorage ciphertext for the vault and browser-managed storage for cached model files. A migration snapshot of earlier ordinary data can remain in localStorage until you clear it. The optional desktop companion stores its state in ~/.pocket-worker/state.json and drafts in ~/.pocket-worker/workspace. Browser and companion stores are separate and do not sync.
The model runs on your device. The current app does not send chat prompts, saved memories or drafts to a cloud AI provider. Optional private Google sign-in uses Supabase to store your account name, email and profile image plus authentication/session records. Access and refresh tokens are stored by the sign-in client in this browser. No Google email, calendar or Drive scopes are requested. No ordinary notes, reminders, drafts, chats or vault data is uploaded by sign-in. Public enrollment is closed by an owner-only server hook. No cloud AI API key or payment details are collected. The local companion uses a temporary local access token to protect its loopback API; that is not an external account token.
What leaves your device
Opening this private staging site sends normal web requests to Netlify. Runtime files are hosted with the app; model weights are downloaded from Hugging Face. Private Google sign-in makes requests to Google and Supabase. The desktop installer also downloads the model from Hugging Face. These services receive ordinary request information such as your IP address and browser or client metadata, subject to their own policies.
The /search command sends your entered query to Wikipedia. Search results can contain source links. Opening an external link makes a request to that website under its own policies. Do not put sensitive information in search queries.
Pocket Worker does not add advertising, analytics trackers or tracking cookies. Third-party hosts and download services may keep their own request logs; this app does not control their retention or practices.
Encrypted vault
Vault entries use separate device-local ciphertext and are never read by the AI, ordinary backups, or search. The master password is not saved. Unlocked secrets exist in memory until lock. Export encrypted vault backups separately; forgotten passwords have no recovery. This feature is not security-audited and cannot protect a compromised device or hostile same-origin code.
Storage, backups and deletion
The app does not encrypt stored notes or drafts. Anyone with access to your browser profile, device files or exported backups may be able to read them. Browser storage can be cleared or evicted. Keep your own backups and avoid putting passwords or other secrets in notes.
You can delete individual memories and reminders, clear conversations, and export browser data from the app. To remove all browser-local data and cached model files, clear this site's storage in your browser settings. This also removes your browser copy of app data. Export only if you want to keep a backup, and delete backup files separately if you want them removed.
To remove companion data, stop the companion and delete ~/.pocket-worker after backing up anything you want to keep. Draft .backup files and downloaded exports must also be deleted if you do not want to keep them. Removing local files does not remove request logs held by third-party services.
Permissions and notifications
Browser notifications are optional and use the permission you grant in your browser. Reminder text may be visible in your device notifications. No notification is sent to another person by this app. Phone reminders require the page open; background suspension can delay them.
Changes and scope
If future versions add cloud AI, sync, analytics or new services, this policy must be updated before those features are used. This page explains the current design; it is not a security audit or a guarantee of compliance with every applicable law.
Pocket Worker is free, open-source software for basic writing, planning, notes and reminders. These statements explain its limits. They do not prevent lawsuits, override applicable law or replace legal advice.
Software and licenses
The app code is offered under the MIT license, provided as-is without warranty, to the extent permitted by law. The Qwen model is under Apache 2.0 and wllama is under MIT. Their license terms and notices still apply. The setup package and public repository include the relevant notices.
AI answers need review
The local model can give incomplete, outdated or incorrect answers. Review and check important facts before relying on an answer or sharing it. It is not a substitute for qualified medical, legal, financial or safety advice. You are responsible for deciding how to use or share output and for respecting the rights of others.
The current model cannot send messages, make purchases, sign into accounts, run shell commands or approve actions for you. The account screen has a separate Google identity sign-in under your control; the model cannot read session tokens or operate that account. Text commands and buttons provide the app's limited actions. Review file-save previews before approving them.
Availability and reminders
No uninterrupted service, support commitment, accuracy or particular result is promised. Third-party hosting or download availability and terms can change. The app has no paid API or automatic paid fallback, but your own device, power and internet costs remain.
Reminders are best-effort, not suitable as your only alert for critical obligations. Browser mode needs the page open. The desktop companion can record due reminders while the page is closed only when it is running and the computer is awake. Nothing runs when the computer is asleep or off. No native phone background service is provided.
Devices and security
Platform targets are not proof of compatibility with every device. Only the listed tests in Settings have been performed. Local inference needs compatible browser features and enough RAM; its RAM use can exceed 1GB. Ordinary app data is not app-encrypted or automatically backed up. The separate vault encrypts its stored entries; encrypted backups are your responsibility.
The optional macOS 11 compatibility builds use a Go runtime no longer receiving security fixes. They are untested on a real Mac and require an explicit launcher confirmation. Prefer a supported operating system and the newer build. Do not disable operating-system security checks to run this software.
Use within applicable rules
Use the app lawfully, respect other people's privacy and intellectual-property rights, and follow the terms of any third-party service you access. Open-source availability does not grant rights to somebody else's content or account. No company identity, special legal status or immunity is claimed here.
Liability and your rights
The MIT license includes its own warranty and liability disclaimer. These pages do not remove rights or obligations that applicable law does not allow to be waived. Their legal effect depends on applicable law and your circumstances. If you plan to offer this app publicly as a service or use it in a regulated setting, seek qualified legal advice about your actual operation and obligations.