# Sistine

> Sistine is the AI workspace for macOS, a native Mac app: a small animated ghost companion that floats above your windows and opens into a full AI chat with voice, documents, and a dock of pre-built mini-apps. It is free on the user's own hardware with a one-click local model, private by default, and works with local, LAN, hosted, and bring-your-own AI. Requires macOS 14+. Website: https://sistine.ai

## What Sistine is

- A floating desktop companion (a ghost) that never steals focus, lives on every Space, and opens into chat on click or a global shortcut (default Option+Space).
- An AI chat with streamed Markdown replies, native answer cards (stat rows, comparisons, timelines, charts, product grids), document and image attachments, on-device voice input (hold to talk or click to latch), and spoken responses.
- A dock of mini-apps inside the panel: Email, Telegram, To-Dos, Recurring Tasks, Markets, Subscriptions, News, Weather, Browse, Studio, Code, Travel (Flights and Hotels), Routines, Study, Shopping, Companionship, Recorder, Chats, plus Holders, Exchange, Mint, and Points for the ghost collection.
- Private by default: with a local model nothing leaves the Mac; per-module private mode pins email, Telegram, bank statements, study material, and browsing to the local model even when cloud AI is enabled elsewhere.

## AI sources (bring your own AI)

1. Local: one click downloads and runs a model sized to the Mac's memory (Ollama under the hood, bound to localhost, context window raised to avoid silent truncation). Free forever. Vision and tool-use requests are automatically routed to capable installed models when the primary model lacks them.
2. Another computer: Bonjour discovery of Macs on the local network running Ollama or LM Studio; pick from models actually installed there. Free.
3. Cloud: hosted models on Plus and Pro plans (no keys, capped by dollars with fallback to local), or any OpenAI-compatible endpoint with the user's own key, stored in the macOS Keychain. Free tier is local/LAN-only by policy.
4. Subscriptions: the Code module signs in with Claude Code or Codex, so an existing Claude or ChatGPT plan does the coding. Coding only; other modules keep using the user's model.

## Mini-apps (modules)

- Email: all inboxes over IMAP with app passwords (Gmail, iCloud, Fastmail, Yahoo, any IMAP). Sorts people from noise, flags what needs a reply, drafts replies in the user's voice, sends via SMTP. HTML mail renders with JavaScript off and trackers blocked. No mail server in the middle.
- Telegram: the user's own account via TDLib; DM/group/channel/bot filters; a Radar tab where a local model flags likely spam for one-tap block/report.
- To-Dos: a window onto Apple Reminders; items sync to iPhone and Watch.
- Recurring Tasks: standing requests on a schedule (daily, weekdays, weekly); results arrive as chat messages. Presets: Morning brief, Market close recap, Weekend plan. Plan limits from 1 (Free) to 50 (Max).
- Markets: the 50 largest US companies with live prices, ticker tape, detail pages with charts, fundamentals, news. Free Finnhub and Twelve Data keys unlock live data.
- Subscriptions: drop a bank CSV or statement screenshot; recurring charges are found locally (statements never leave the Mac); one monthly total; advice on what to cut, cancellation steps, retention-call scripts.
- News: headlines with a hero story, zero setup.
- Weather: WeatherKit forecast for a home location that stays on the Mac.
- Browse: an in-panel browser the assistant reads along with; read-only by design (the AI cannot navigate, fill, or submit); page text fenced as untrusted.
- Studio: on-device image generation (Apple Core ML Stable Diffusion), model sized to the machine.
- Code: build websites and programs by describing them; live preview, plain-English change list with Undo, click-to-point element picking; three plain-language autonomy levels (Careful, Standard, Trusted); one-click publish to a real URL with QR code (site limits by plan); user-built mini-apps join the dock, sandboxed to to-dos, weather, and watchlist APIs only.
- Travel: Flights (Google-Flights-style search, price-sorted with a Best badge) and Hotels (real nightly rates), each with an advisory ask bar.
- Routines: pick self-care goals once, get a short daily list; each task has a plain how, a research-backed why, and any warning always shown.
- Study: paste text, a PDF, an image, or a link; get a study sheet and a scored multiple-choice quiz; deterministic scoring; every question carries an evidence passage verified to exist in the source.
- Shopping: curated shopping that remembers who you shop for; a people rail with occasions; a curator chat that finds real products with prices, stores, and links.
- Companionship: multiple companions with distinct personalities, each with its own persistent conversation and memory.
- Recorder: screen recording plus a demo editor with auto-zoom, click ripples, soundtrack, AI voiceover script, and export.
- Chats: every conversation, grouped by module.
- Holders: signature-gated group chat for collection holders, with scam-flagging.
- Mint, Exchange, Points: see the ghost collection below.

## Abilities and the approval model

- Abilities are opt-in switches: memory, web access, screen awareness, desktop actions. Disabled tools are never shown to the model.
- Side-effecting actions (open link, calendar event, add to-dos, price alerts, run Shortcuts, run commands in Code, read the screen) always show an approval card naming the exact action and target. "Not now" is the prominent button and Enter does not approve.
- Unattended runs (scheduled tasks, background lookups) fail closed: no approval handler means the tool does not run.
- Web and screen content is fenced as untrusted with per-call random markers; reading a URL the user did not type and no search returned requires approval (anti-exfiltration); once untrusted web text is in context, screen reading is disabled for that run.
- Web search: 40 searches/day included through a keyless proxy; the user's own free Brave key removes the limit and bypasses the proxy.

## Privacy

- Conversations, memory (a plain text file the user can open and edit), documents, and module data are stored locally. Sensitive stores are encrypted at rest.
- Content reaches a cloud provider only when the user configured one and submits a request. Private mode (default on) keeps email, Telegram, statements, study material, and browsing on the local model regardless.
- Screen reading is a single on-request snapshot, OCR on-device, image discarded. Voice is on-device Apple Speech, only while the button is held; the app never listens in the background.
- API keys live in the macOS Keychain. Crash reports are off by default and shown verbatim before sending. Updates are EdDSA-signed and verified before install. All local data can be deleted from Settings.
- No accounts, no analytics, no trackers. Policy: https://sistine.ai/privacy.html

## Pricing

- Free: the whole app on your own hardware, forever. $0.
- Search: adds web search for the local model. $9/mo.
- Plus: adds a fast hosted model. $19/mo.
- Pro: best available model, higher limits, priority. $49/mo.
- Max: the most room of any plan, first in line. $199/mo.
- Hosted allowances are capped by dollars; at the cap, replies fall back to the local model.

## Sistine Ghosts (the collection)

- 2,222 generative ghost companions on Solana, grown deterministically from hashes by one algorithm; 35 trait types across form, cloth, face, adornment, motion, and presence. Quiet, clean outputs are the norm; flashy traits are deliberately rare.
- License: the artwork derives from a CC BY-SA 3.0 p5.js sketch (openprocessing.org/sketch/1138728) and is licensed CC BY-SA 4.0.
- Free mint for app users at launch: one voucher per person, minted directly to the user's own Solana wallet (the app never generates or holds keys). Network fee under a cent.
- Holders verify by signing a plain-text message (read-only, never keys or funds) and their ghost floats their desktop.
- The Exchange module browses the collection offline (traits, rarity, filters), reads live floor/listed/volume from Magic Eden, and links out to marketplaces for trading. Non-custodial always; 0.9% fee when in-app trading is live.
- Points: daily claims by tier plus per-token holding accrual computed from on-chain events; levels Rookie through Mythic; scoreboard with percentile tiers. Points and credits have no monetary value, are never sold or airdropped, and redeem only inside the app.

## Keyboard shortcuts

Option+Space toggle chat (configurable) · Cmd+O open chat · Cmd+N new conversation · Cmd+Shift+S summarize screen · Cmd+Shift+V ask about clipboard · Esc cancel/back/collapse · Cmd+Shift+R rescue window · Cmd+, settings

## Links

- Website: https://sistine.ai
- Documentation: https://sistine.ai/docs.html
- Download: launching soon; email signup at https://sistine.ai/#launch
- Privacy: https://sistine.ai/privacy.html
- Terms: https://sistine.ai/terms.html
- Hosting terms: https://sistine.ai/hosting.html
- Refunds: https://sistine.ai/refunds.html
- Support: support@sistine.ai