The NDA safe AI
that even works in
airplane mode.
AI that never phones home. It writes, summarizes, and actually sees your images, all on your device. Always. No account. No subscription. Nothing leaves your device.
Free for 14 days. Then €29.99, one-time. No monthly fee. No renewal. No subscription.
The AI that works offline, costs nothing per month, and keeps your data on your device. No cloud. No account. No exceptions.
See it work
Real AI chats. Wi-Fi off.
Every word generated on your device. No cloud. No server. Every screenshot below came out of the app running in airplane mode.
Native image understanding
It does not just read your image. It sees it.
Paste a screenshot or drop a photo, and the model looks at the image directly, plus the text read from it. The actual pixels go to the model, and on-device Apple Vision reads the text out of the image as well. Always both. Layout, arrows, sketches, charts, handwriting: the model sees what you see, not a text-only transcript. And like everything else in Airplane AI, the image is processed entirely on your device. It is never uploaded anywhere.
Whiteboard photo
Photograph the sprint wall. Get the summary.
Snap the whiteboard before it gets wiped. The model sees the boxes, the arrows, and the scribbled connections, plus the handwriting read from the photo, and turns the whole mess into a clean written summary. The photo never leaves your device.
Dashboard screenshot
Screenshot the dashboard. Ask what it says.
Paste a screenshot of a chart or KPI dashboard and ask about it. The model sees the bars, the trend lines, and the layout itself, plus every label and number read from the image. Even the internal dashboard your NDA says you must never upload.
Handwritten note
Photograph the meeting note. Get the action items.
A page of handwritten meeting notes becomes a tidy list of action items. The model sees the page itself, plus the handwriting read from it, so underlines, arrows, and margin marks still carry meaning. All of it stays in the room.
vs. Cloud AI
Works when they don't.
ChatGPT, Claude, and Gemini need servers, accounts, and a connection. Airplane AI needs your device.
| Feature | Airplane AI | ChatGPT | Claude | Gemini |
|---|---|---|---|---|
| Price | €29.99 once | $20/month | $20/month | $20/month |
| Cost over 12 months | €29.99 total | $240+ | $240+ | $240+ |
| Works offline | ||||
| Data stored on servers | Never | Yes | Yes | Yes |
| engineered for on-device work | by architecture | ⚠ by policy only | ⚠ by policy only | ⚠ by policy only |
| on-device | ||||
| Account required | None | Required | Required | Required |
| Rate limits / usage caps | None | Yes | Yes | Yes |
| Trains on your inputs | Never | Yes (opt-out) | Yes (opt-out) | Yes |
| Works on a plane / no signal |
Scroll right to see all columns →
NDA safe by design
The D in NDA stands for Disclosure. Airplane AI discloses nothing. The app cannot.
An NDA is a Non Disclosure Agreement. The one verb it prohibits is disclosure to a third party. Airplane AI has no third party to disclose to. The app has no network entitlement, so the operating system itself blocks every outbound connection. Nothing you type, paste, or dictate ever leaves the device in front of you. That is the contract your NDA was trying to enforce, written into the binary.
No disclosure vector
Nothing leaves your device. Not even by accident.
The core concern in every confidentiality clause is disclosure to third parties. Airplane AI removes the disclosure vector entirely. Your prompts are processed locally and never transmitted anywhere. There is no third party to disclose to, no training pipeline to leak into, no vendor logs to subpoena, no employee to read a log.
Client work, M&A, litigation
Use it on your most sensitive projects.
Draft NDAs. Review contracts. Summarize deposition transcripts. Analyze deal memos. Work that your NDA would never allow you to paste into ChatGPT is safe in Airplane AI, because nothing leaves the room.
For your legal team
Show them the entitlements file.
The app ships with a single entitlement: app sandbox. No network access entitlement exists. Your legal team or DPO can read the entitlements file in under a minute and confirm: outbound connections are architecturally impossible.
* NDA stands for Non-Disclosure Agreement. The D is for Disclosure. Airplane AI discloses nothing to anyone. Your data never leaves your device. It cannot. That covers the disclosure angle completely. But every NDA is different. If yours contains clauses beyond non-disclosure, such as restrictions on tools, software categories, or specific obligations around AI use, read those carefully. Airplane AI does not know what else is in your NDA. Nobody does except you and the other party.
The answer is always yes
Safer than opening it in Excel.
If you would feel safe opening a file in Excel, you can feel much more secure opening it in Airplane AI. Modern office software connects to more servers than you care to know. Airplane AI connects to none. The AI is just a file on your computer.
Personal data in a spreadsheet
Can I drop a CSV with customer data into Airplane AI?
Yes. The CSV is read on your device and extracted to text by the app, entirely on-device. No row, no name, no email, no phone number leaves this machine. Unlike ChatGPT, Copilot, or Gemini, where every pasted row becomes part of a vendor's request log.
Confidential client work
Can I summarise a confidential contract I received under NDA?
Yes. Paste the PDF or drag it into the chat. Apple PDFKit extracts the text on your device. Airplane AI reads the text locally. The contract, the clauses, the counterparty, the dollar amounts, none of it leaves your device. There is no outbound path to leak through.
Health, legal, HR records
Can I paste medical notes, payroll, or therapy transcripts?
Yes. GDPR Article 9 sensitive categories. Attorney-client privileged material. Employee information. Cloud AI turns every paste into a cross-border transfer. Airplane AI keeps the paste inside the macOS App Sandbox and inside your building.
Trade secrets and unreleased work
Can I ask Airplane AI about our unreleased product?
Yes. Unreleased code, patents in flight, unannounced launches, M&A draft memos. None of it is indexed, logged, or sent to a training pipeline. There is no training pipeline. The model is frozen, bundled, and read-only.
Student data under privacy laws
Can I grade papers or analyse student work?
Yes. FERPA in the US, national data-protection laws in the EU. Cloud AI makes every student essay a disclosure event. Airplane AI makes it a local file operation. Your device reads it, the local model summarises it, you close the app, done.
The thing your DPO actually asks
Can you demonstrate zero network traffic?
Yes. Open Activity Monitor, Network tab. Filter for Airplane AI. Watch the bytes. They stay at zero. Check the app's entitlements file. There is no network entitlement to grant or revoke. A DPO can verify this in under ten minutes without trusting any marketing claim. The macOS sandbox is the proof, not the copy.
The network truth
Every other AI and office tool phones home. Airplane AI cannot.
Not by policy. Not by promise. By kernel-enforced macOS sandbox. The entitlements file has no network key, so the operating system refuses outbound connections for the app.
| App | Licensing / update ping | Telemetry & analytics | Your content | AI prompts |
|---|---|---|---|---|
| Airplane AI | Apple StoreKit at purchase only | None | Stays on your device | Stays on your device |
| Microsoft Excel 365 | Continuous licensing & sync | Connected Experiences on by default | Uploaded to OneDrive if AutoSave on | Every Copilot prompt to Microsoft servers |
| Google Sheets | Continuous | Always on, Google account tied | Lives on Google's servers by design | Every Gemini prompt to Google |
| ChatGPT Desktop | Continuous | Every session, tied to your account | Every attachment to OpenAI | Every prompt to OpenAI |
| Notion | Continuous | Always on | Every page on Notion servers by design | Every Notion AI prompt to Notion + OpenAI |
| Slack | Continuous | Always on | Every message on Slack servers by design | Every Slack AI prompt to Slack |
Figures reflect the default configuration of each product as shipped in 2026. Enterprise plans can sometimes narrow the scope with paid contracts and data-processing agreements. Airplane AI needs no plan upgrade and no DPA, because there is no data transfer to agree on in the first place.
Works anywhere
On a plane. In a tunnel. In the middle of nowhere.
Every other AI stops when your connection does. Airplane AI keeps going. Always.
Airplane mode, literally
Drop Wi-Fi mid-sentence. Keep typing.
The model runs entirely on your device's GPU. No ping to a server. No loading spinner waiting for a response. Turn on airplane mode right now and ask anything. It works because there is nothing to connect to.
Trains, tunnels, hotels
Terrible hotel Wi-Fi is no longer your problem.
Conference Wi-Fi with 500 people on one router. Train tunnels at 250 km/h. Underground car parks. Remote job sites. Wherever you are when you need to think, Airplane AI is already there.
Corporate firewalls
Your IT department cannot block it.
Many enterprises block external AI services at the firewall. Airplane AI makes no outbound connections, so there is nothing to block. It works on the most locked-down corporate network because it does not use the network at all.
Who uses Airplane AI
Finally: an AI you're actually allowed to use.
Every other AI sends your words to a cloud server. That's why your compliance team said no. Airplane AI is different. Everything stays on your device.
Lawyers & Legal Teams
Client confidentiality isn't optional. Airplane AI never touches your client data. It never could. There is no server to send it to.
Doctors & Therapists
Patient data stays in the room. GDPR Article 9 and HIPAA apply to cloud AI. They don't apply here, because nothing leaves your device.
Consultants & Advisors
Every engagement is under NDA. Your client's strategy goes nowhere. Not to OpenAI. Not to Anthropic. Nowhere.
Finance & HR Professionals
Salary data, performance reviews, M&A strategy. Numbers stay in the room. Like a good CFO.
Researchers & Academics
Pre-publication data is your IP. Your research trains nothing. Not now, not ever, not in a future update.
Anyone tired of subscriptions
ChatGPT costs $240/year. Airplane AI costs €29.99 once. No renewal. No subscription. Updates within the current major version are included.
Where it saves you
Works when every other AI can't.
On a flight
Wi-Fi just died.
Cloud AI: offline. Airplane AI: keeps going. Works at 35,000 feet. Works in the subway. Works in the middle of nowhere. No signal needed.
Under NDA
You can't send that anywhere.
Client contract. Patient notes. M&A strategy. Airplane AI never leaves your device. Your prompt never touches a server. Not even for a millisecond.
🇪🇺 GDPR & compliance
Your DPO said no to cloud AI.
And they were right. Airplane AI is engineered to keep your content on your device, not by checkbox. No data transfer means no data transfer risk. The obligation doesn't exist if the transmission doesn't exist.
Rate limits
"You've reached your limit."
Upgrade, wait, or switch to the slower model. Airplane AI has no limit. Nobody else is on the queue. It's your device. It runs as fast as your device runs.
The math
Free for 14 days. Then one dinner out. Then never again.
You get the full app free for the first 14 days, no card required. After that, one payment of €29.99 unlocks the current major version for good. No monthly bill, no seat licence, no renewal. Here is what the industry actually charges per year for comparison, from entry plans to the flagship ones that keep showing up in headlines.
ChatGPT Plus $240 / year
Claude Pro $240 / year
Gemini AI Pro $240 / year
Copilot Pro $240 / year
Perplexity Pro $240 / year
Microsoft 365 Copilot (per user) $360 / year
Cursor Pro $240 / year
ChatGPT Pro (flagship) $2,400 / year
Claude Max 20x (flagship) $2,400 / year
Perplexity Max (flagship) $2,400 / year
Google AI Ultra (flagship) $3,000 / year
Airplane AI €29.99 once
Break even vs. the cheapest subscription in six weeks. Break even vs. Google AI Ultra in under four days. After that, every month is free. No renewal. No seat licence.
Public list prices, consumer tiers where available, monthly rates converted to annual. Enterprise plans, education discounts, and annual prepayment discounts vary. Airplane AI has one price, one payment, within the current major version.
Try it on your own device. Free for 14 days, then €29.99 once. No account. No subscription.
How it works
Download. Open. Chat.
No account. No setup. No API key. Just AI on your device.
-
1
Download from the Mac App Store.
The AI model is bundled inside. Nothing to configure, no separate download, no account to create.
-
2
Open the app.
Loads onto your device's GPU. Ready in seconds. Works without Wi-Fi from the first launch.
-
3
Ask anything.
Type, dictate with your voice, or paste images the model actually sees, pixels and text alike. Everything stays on your device. Nothing is sent anywhere.
Why it's actually private
Every other AI promises privacy.
Airplane AI makes it impossible to break.
Most AI tools say "we respect your privacy." Airplane AI does not need to. The app physically cannot send your data anywhere. macOS enforces that at the kernel, not in a terms of service.
No internet access
The app cannot reach the internet.
Not "we don't send your data." The operating system prevents it. The build pipeline checks this on every release. You can verify it yourself: open Activity Monitor, search for Airplane AI, check the Network tab. Zero bytes. Always.
No account means no identity
Airplane AI doesn't know who you are.
No email. No login. No payment history linked to your questions. The app can't know who's asking what. There's no connection between you and any server at all.
Your words train nothing
Your questions disappear when you close the app.
The AI model is frozen. It cannot learn from you. Your conversations are stored only in your own device's local storage, and only if you want them to be.
Questions
Everything you want to know.
Is it safe for work covered by NDA?
For the general case: yes. Your prompts never leave your device. Nothing is sent to a vendor. Nothing is cached on a server. If your NDA prohibits sharing client information with third-party AI services, Airplane AI removes that path entirely. There's no third party. There's no disclosure. Read your specific NDA for unusual clauses. Every NDA is different.
Is it engineered to keep your content on your device?
By construction, not by promise. GDPR obligations are triggered by personal data leaving your control. Airplane AI ensures data never leaves your device. No data transfer means no data processing obligation. No processor agreement needed because there's no processor. A lawyer or DPO can verify this in under 10 minutes.
Does it actually work without Wi-Fi?
Yes. That's the whole point. The AI model lives inside the app. Everything runs locally. Drop Wi-Fi mid-conversation. Keep going. Fly. Work underground. Travel to a conference with unreliable hotel Wi-Fi. It doesn't matter.
How good is the AI?
For everyday work: excellent. Writing, editing, coding, research, translation, analysis, summarizing, brainstorming. It also understands images natively: the model looks at the image directly, plus the text read from it, all on your device. It uses Google's open Gemma model, running at full speed on your device's GPU. Expect answers in under a second. It won't do what GPT-4 can do with a million-token context and live web search. But for the private, focused work you actually need AI for, it's more than enough.
Why buy this when ChatGPT has a free tier?
ChatGPT's free tier uses your conversations to train future models, requires an account, needs internet, and rate-limits you constantly. Airplane AI is private, offline, unlimited, and owned, not rented. And if you're using AI for confidential work, ChatGPT's free tier isn't an option at all.
What are the requirements?
device with Apple Silicon (M1 or later), macOS 15 Sequoia or later, and 16 GB of RAM minimum. If you have a newer MacBook Pro or MacBook Air, you're almost certainly set.
How big is the download?
About 4.5 GB. The AI model is bundled inside the app. Nothing to download separately, no configuration. Big download once, then it's done.
What happens if my device breaks?
It's a Mac App Store purchase. Redownload it on any device with your Apple ID. No extra charge.
What you need
Three things.
macOS 15 Sequoia or later
Works on the latest macOS
Apple Silicon Mac
M1 or any newer chip
16 GB of memory
24 GB recommended for best speed
Differentiation
Same idea. Different choices.
Other local AI tools let you pick a model from the internet and run it on your Mac, and many of them keep an open door to the web for plugins, hubs, and updates. Airplane AI makes the opposite choice: a single curated model, zero configuration, offline-first and only. NDA safe by architecture, not by promise.
| Feature | Airplane AI | Other local AI tools |
|---|---|---|
| NDA safe by architecture | Depends on configuration. Plugins and tools can reach the web. | |
| Offline-first and only | Not really. The app keeps internet access for updates, telemetry, online models, and MCP tool plugins. | |
| Zero configuration | Download the app and start | Select a model, download the model, pick a quantisation, configure context length, runtime backend, GPU layers, and sampling parameters |
| Single curated model, included | Gemma 4 E4B, bundled | Pick and download from a model library |
| Extra downloads after install | None | Multi-GB models, fetched from the internet |
| Telemetry or app-update pings | None, ever | Anonymised usage and update checks |
| Distribution | Mac App Store | Direct download from a website |
| macOS sandbox enforced | Regular app permissions | |
| Image and voice input on-device | Native image understanding (the model sees the image directly, plus the text read from it by offline Apple Vision) and offline Speech, built in | Not standard |
| Account or login | None | Often an optional account |
Local AI is a great idea. Airplane AI takes the most private path through every decision.
Own your AI.
Pay once. Done.
Free for 14 days. €29.99 once after that. One payment on the Mac App Store, no renewal, no account. Works offline, anywhere your device goes.
Under the hood
A world-class AI model, running inside the app on your Mac.
No servers. No accounts. No cloud fallback. The model is open source, the inference happens on your device, and the operating system itself blocks the network. Three things you actually want from an AI tool, finally in one place.
The model
Local On-Device Gemma, by Google DeepMind. Open source.
Airplane AI runs on Gemma, the open-source family of language models built by Google DeepMind, the same lab behind AlphaFold, AlphaGo, and Gemini. Gemma is small enough to live inside a Mac app and good enough to draft contracts, summarise transcripts, review dense documents, and explain hard ideas in plain language. You are not getting a stripped-down preview model. You are getting world-class research, in a file, on your machine, and because the weights are open you keep using it long after any vendor changes their mind about pricing, access, or politics.
The integration
Inference runs inside the app. There is no server.
Every answer Airplane AI generates is computed by your own Mac. The model file ships inside the app bundle, the inference loop runs on your CPU and GPU, and the whole journey from your prompt to the next token never touches a server, ours or anyone else's. There is no cloud mode. There is no remote endpoint waiting for a fallback. Drop your Wi-Fi, turn on airplane mode, fly to the other side of the world: the AI keeps working because it was never anywhere else to begin with.
The privacy
macOS itself refuses to let the app talk to the network.
Privacy here is not a setting you tick, it is the absence of a capability. The app is shipped without the macOS network entitlement, and macOS then refuses to let the binary open any outbound connection, ever, even if a future bug or a malicious update tried. Your text, your voice, your screenshots, your chat history: every byte stays on your device because the operating system makes it impossible for them to leave. You can read the entitlements file in plain XML inside the app bundle and confirm it yourself.
Why this matters
Your most sensitive work is finally allowed to use AI.
An AI you actually own, on the device you actually own, with a model from a research lab that publishes its work. Use it on the train, on a flight, in a hospital, in a courtroom, in a deposition, in a clinic, in a notary's office. Use it on client files that no NDA would ever let you paste into a cloud chatbot. Pay once. Keep it. Nothing to renew, nobody to ask for permission, nothing leaving your machine.
Verify it yourself
Two checks, ten minutes.
Open Activity Monitor, switch to the Network tab, filter for Airplane AI. Watch the bytes-sent column. It stays at zero, even while the app is generating. Then right-click Airplane AI.app, choose Show Package Contents, open Contents/Resources/AirplaneAI.entitlements. The list of allowed entitlements is right there in plain XML. No network key, no fallback path.
Zero-network invariant
The promise, in plain language.
Airplane AI makes no outbound network connection at any time, under any circumstance, whether initiated by the user or automatically. No user content (text, audio, image, chat history, metadata) ever leaves the device. The only network traffic the operating system may perform on the app's behalf is Apple's StoreKit flow for in-app purchase and receipt validation, which carries no user content and is triggered only by an explicit user action on the purchase or restore screen.