Free to start. Yours forever.
Self-serve, no sales calls. Your brain stays encrypted on your Mac on every plan — including Free. Start with one project; lift the cap to unlimited when you're ready — sync and recovery are arriving soon.
- 1 project
- Context Packets
- Exceptions inbox
- On-device, one Mac
Free isn't a trial. It's yours.
- Unlimited projects
- Sharper “boost” consolidation Arriving soon
- Multi-device sync Arriving soon
- Recovery kit Arriving soon
Cancel anytime. Your brain stays on your Mac — we can't hold it hostage; we never had it.
Card, no sales. Zero-knowledge on every plan — your keys and plaintext never leave your Mac.
What Pro actually buys you.
Unlimited projects — today. Free is capped at a single project: perfect to feel the magic on one company, one client, or one personal brain. Pro lifts the cap entirely — run a project per client, plus your own work brains, all sealed off from each other. That's what you unlock the moment you upgrade.
Convenience, arriving soon. Multi-device sync to keep your brain with you across Macs, a recovery kit so a lost laptop isn't a lost brain, and a sharper cloud boost for consolidation — these are on the way for Pro. The upgrade isn't about unlocking memory — Free already remembers. It's about scale now, and never thinking about the plumbing later.
Every plan keeps your brain on your Mac.
The differences are about how many projects you run, how convenient it is to manage, and what a team needs to collaborate safely.
| Feature | Free$0 | Pro$19/mo · $180/yr |
|---|---|---|
| Projects | 1 | Unlimited |
| Context Packets | ✓ | ✓ |
| Exceptions inbox | ✓ | ✓ |
| Pure zero-knowledge | ✓ | ✓ |
| Per-project walls | ✓ | ✓ |
| On-device, one Mac | ✓ | ✓ |
| Multi-device sync | — | Soon |
| Sharper “boost” consolidation | — | Soon |
| Recovery kit | — | Soon |
The fine print, in plain words.
What's a “project”?
A project is an isolated, sealed brain. It can be a company, a client, a personal project, or your own work brain — whatever you keep apart in your head, you keep apart in Hippo. Projects never share data with each other: one project's AI never sees another's, and the Consent Ledger proves it.
If Free already remembers, why upgrade to Pro?
Mostly one reason today: more projects. Free is capped at a single project, and Pro makes that unlimited — run one per client plus your own work brains. The convenience features (multi-device sync, a recovery kit so a lost Mac isn't a lost brain, and a sharper cloud boost) are arriving soon for Pro. Either way, upgrading isn't about "unlocking memory" — Free already has that.
Is my data really private on the Free plan?
Yes. Pure zero-knowledge applies to every plan, including Free. Your encryption keys and plaintext stay on your Mac; the cloud only ever holds encrypted blobs it can't open. See the Trust page for the full architecture.
Can I pay yearly?
Yes. Pro is $19/mo, or $180/yr if you'd rather pay once a year — that's $15/mo, about two months free.
Is there a plan for teams?
It's in the works — shared projects, per-project confidentiality walls, and a shared Consent Ledger with audit. Email support@d28.ai and we'll reach out the moment it's ready.
Why not just use ChatGPT's memory?
Use both! Native memory is genuinely useful — inside that one app. Hippo is the memory you own: it works with every AI, keeps each project sealed off from the others, and shows you exactly what it knows and what was shared. Their memory is a feature of their app. Hippo is yours.
What happens if I cancel?
Nothing dramatic. Your brain lives on your Mac, not our servers, so you keep every memory. You drop back to the Free plan — one project, still encrypted, still yours. We can't hold your data hostage; we never had it.
What Macs does Hippo run on?
Apple Silicon Macs with Apple Intelligence (macOS 26 or later). Support for older Macs is on the way.
Do I need to paste an API key or run anything technical?
No. Hippo briefs the AI you already use and already pay for — your own ChatGPT or Claude. There's no API key to paste and nothing to run in a terminal. Install the Mac app, open Hippo, and ask for a briefing.
How does revocation work?
Revoke any agent's future access in one click. We cut it off and log the cutoff in the Consent Ledger. We're honest about the limit: revocation is forward-looking — we don't claim a model “forgets” what it already saw.
One project free. Unlimited when you're ready.
No sales calls, no API keys. Your brain stays on your Mac, yours not the model's.
60 seconds · no account · no API keys