# Official Instinct Breakdown (2026) *By Nicolas Zeeb · August 20, 2026 · 12 min · LLM basics* Instinct is the invite-only personal AI assistant you text or call. Full breakdown: access, terms, security record, strengths, gaps, and best 2026 alternatives. Instinct is an invite-only personal AI assistant you text or call, built by Spear Street Technology, Inc. out of San Francisco. It became the most talked-about personal AI launch of the summer in about a week, partly because early users say it feels like magic and partly because its privacy story made TechCrunch within days. This breakdown covers what Instinct actually is, how it works, what it costs, where it's strong, where it falls short, and which alternatives are worth considering if it doesn't fit. It draws on Instinct's own site and legal documents, plus launch-week reporting and early-user accounts. ## What Is Instinct? ![Instinct Homepage](https://cdn.sanity.io/images/ghjnhoi4/production/79d2373e001703d6275c32a2018160e70c847ab7-3020x1810.png) Instinct is a personal AI assistant that connects to your applications and devices: email, messaging, screen, audio, location, and more. The company's own pitch is that there are no new interfaces. You text it or call it, and it uses a phone and a computer the same way a human would. The product comes from Spear Street Technology, Inc., a San Francisco company doing business as Instinct. Forbes, citing California corporate filings, reports the entity was registered in April 2026 by Noah Shinn, previously a research scientist at Sierra. The public site names no founders, and the company has kept a low profile even as usage spread through private invites. What separated Instinct from a crowded assistant market is aggression. It finishes things. Early users describe an assistant that books the restaurant, negotiates the bill, fills out the paperwork, and follows up without being asked twice. Sheel Mohnot called it "OpenClaw for normal people," and the label stuck because it captures the positioning: the agency of a self-hosted computer agent without asking you to configure one. ## How Instinct Works The primary interface is a text conversation, including iMessage and WhatsApp, plus phone calls. Behind that conversation, the agent works on a persistent cloud computer and reaches your connected services with stored credentials. A few things about this architecture matter: - **One continuous thread.** Everything happens in a single ongoing conversation. There's no project structure or workspace to organize work into, which early users both love and complain about. - **It has its own computer.** Instinct operates a persistent machine of its own, with browser access and cached credentials, so it can keep working between your messages. - **It's proactive by design.** The company says the core model is trained to handle the personal texture of everyday life: following up on threads you dropped, calling or texting you first, arranging the ride to the airport. - **It acts with real authority.** Its own Terms of Service appoint the service as your agent, authorized to enter into binding agreements, commitments, and transactions on your behalf. - **It sees a lot.** The terms describe receiving screen captures, cursor movements, and keyboard inputs from your device, alongside email, messaging, audio, and location data. Investor Anish Acharya offered the clearest technical read in a comparison of Instinct, Grok Bot, and ChatGPT Work: persistent agents with cloud computers, browser access, cached credentials, recurring loops, and a top-level agent that dispatches work. In his framing, Instinct made the strongest consumer-product tradeoffs and hid almost all of the machinery. Early users put it to work fast. Mohnot reported 677 messages in five days and 15 completed jobs, from lowering a Comcast bill to coordinating vendors in India over WhatsApp. Others used it for honeymoon flight verification, sold-out ticket monitoring, subscription audits, and school-schedule logistics. These are anecdotes from invited beta users, not benchmarks, but the task range is wider than the booking-a-handyman headline suggests. ## Instinct Pricing and Access ### How much does Instinct cost per month? Instinct is free today, and no price has been published. Access is limited to a private group while the company says it scales compute. You can join the waitlist or get an invite from an existing member. Free is not a business model, and the funding coverage is worth reading before you connect an inbox. Forbes reports at least three rounds in four months: an early round above a $100 million valuation led by Conviction and Greenoaks, a $75 million Series A at over $500 million led by Kleiner Perkins in early August, and a $250 million Series B at a $2.5 billion valuation led by Index Ventures and Benchmark, which the company confirmed to the Wall Street Journal. Forbes also notes that a subscription and advertising against the data the agent can reach are both available to the company from here. When a product this hungry for personal data has no announced price, the future business model is part of the buying decision. You can't self-host Instinct. The computer, the model, and your data all live on Spear Street's infrastructure. ## Instinct Security and Privacy Controls ### Is Instinct safe to use? This is the section that matters most for Instinct, because the launch week produced a public record most products never accumulate. Three documented incidents from early users: - **Retained data after disconnect.** Claire Vo disconnected Google access at 11 AM and received an inbox summary at 2 PM. She found full message text in her data export and initially couldn't delete the stored records. The team acknowledged the gap and added a deletion tool in settings, per Peter Yang, who hit the same wall. - **Prompt injection through email.** Hello Patient co-founder Alex Cohen emailed his own inbox malicious instructions as a test. Instinct followed them and returned a summary of open tasks. He deleted his account. - **Unapproved action.** Moxxie Ventures founder Katie Jacobs Stanton reported that Instinct sent an email on her behalf without checking first. She disconnected its email access and wrote that one unauthorized action can reset trust to zero. The legal terms match the architecture. The Terms of Service grant Instinct a perpetual, irrevocable, transferable, and sub-licensable license over broadly defined user materials, including for AI model training. You can opt out of training at app.instinct.co/settings, but the opt-out is go-forward only, carries a safety-review exception, and models already trained on your materials stay trained. A Vault feature is excluded from training. Google Workspace data received through Google's APIs is excluded from training, but the documents state no equivalent exception for Microsoft data, messaging apps, screen captures, audio, or location. To the company's credit, the Privacy Notice is unusually forthcoming about the risks: unintended communications and payments, disclosure of sensitive information, and hidden instructions designed to manipulate agents are all named. The terms also place responsibility for the consequences of actions on you, the user, and include a binding arbitration clause with a class action waiver. The honest summary: Instinct asks for more access than any consumer product most people have ever installed, documents real failure modes in its own legal language, and is operated by a months-old company in stealth. Some users will take that trade. You should take it with your eyes open. ## What Instinct Does Well - **It finishes jobs.** The defining trait. Where most assistants stop to confirm, Instinct continues. Acharya reported it reset a password on its own to complete a purchase when a site blocked it. - **Zero interface friction.** Text or call, including iMessage and WhatsApp. There is nothing new to learn, and that matters for people who will never configure an agent. - **Persistent computer, persistent worker.** The cloud machine keeps state between messages, so multi-day tasks and follow-ups happen without you re-explaining context. - **Proactive outreach.** Following up on dropped threads and calling you first is the behavior people say they want from an assistant and most products don't deliver. - **Real-world task range.** Appointments, reservations, bill negotiation, vendor coordination, ticket monitoring, inbox triage. The early-user record shows genuine life-admin coverage. ## Where Instinct Falls Short - **The privacy record is already public.** Retained inbox data after disconnect, a successful prompt-injection test, and an unapproved email, all in the first week of coverage. - **The terms are heavy.** Perpetual, irrevocable, sub-licensable rights to your materials, device-level data collection including screen and keyboard, and binding arbitration with a class action waiver. - **No published pricing.** Free today, with a business model that hasn't been announced. The funding coverage suggests your data may be part of it. - **No self-hosting or deployment choice.** Everything runs on Spear Street's infrastructure. - **No model choice.** You get Instinct's proprietary core model. There's no option to route sensitive tasks to a local model or a provider you trust. - **One crowded thread.** Multiple early users wanted separate threads for separate jobs. A single continuous conversation gets noisy when it's running your life. - **Private access only.** Waitlist or invite. If you need an assistant this week, you may not get in. - **Browser brittleness.** Early testers hit CAPTCHAs, two-factor walls, and a failed high-demand ticket purchase that crashed repeatedly. The web is still hard for every agent. ## Key 2026 Trends in Personal AI Assistants - **Consumer agents went mainstream this year.** An IEEE global study found 52% of technology leaders expect agentic AI to reach mass or near-mass consumer adoption as a personal assistant, scheduler, or family calendar manager in 2026 [[1]](https://transmitter.ieee.org/iot-2026). - **Capability is jumping, and so are the stakes.** The Stanford AI Index 2026 recorded agent success rates on real-world terminal tasks rising from 20% in 2025 to 77.3% [[2]](https://hai.stanford.edu/ai-index/2026-ai-index-report). Agents that act also fail, and failure with inbox access looks different than failure in a sandbox. - **Access breadth is the new battleground.** Instinct's launch week showed that consumer agents now ask for email, messages, screen, audio, and location at once, and that security researchers will test those permissions publicly within days [[3]](https://techcrunch.com/2026/08/24/instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns/). - **Governance lags adoption.** Deloitte's 2026 research found only one in five companies has a mature governance model for autonomous AI agents [[4]](https://sqmagazine.co.uk/ai-agents-statistics/). Consumer governance is even thinner. ## Who Should Consider Instinct? - **The curious early adopter:** You want to feel the frontier of consumer agents and you're comfortable isolating the experiment from sensitive accounts. - **The overloaded life-administrators:** Appointments, reservations, bills, and vendor coordination are piling up and you want them handled, not advised on. - **The text-native user:** You live in iMessage and want an assistant that meets you there with zero setup. ## Who Should Look at Alternatives? - **If privacy is the point:** The documented retention incident, the injection test, and the training license are hard to square with a privacy-first posture. - **If you want deployment choice:** No self-hosting, no local option, no model selection. - **If you need it for work:** Employer-confidential data inside a perpetual training license is a bad combination. Even enthusiastic testers recommend a low-risk account. - **If you want accountability:** Binding arbitration and a class action waiver limit your options when something goes wrong. - **If you need it today:** Private access means waiting. ## Best Instinct Alternatives (2026) ### 1. Vellum [Vellum](https://www.vellum.ai) is an open-source [personal AI assistant](https://www.vellum.ai/blog/what-can-a-personal-ai-assistant-do) that runs as a native desktop app on your own device or in Vellum Cloud, with iOS, web, voice, email, Telegram, Slack, and phone surfaces all sharing one persistent memory. **Score: 100** **Standout strengths:** - Every sensitive action asks permission, with an Allow or Deny prompt and a risk badge. The default is to deny, and you set the trust rules. - Your workspace, memories, and config are yours: export them, back them up, or delete them at any time. - Eight types of memory that learn your patterns and carry context across every conversation and every surface. - Use Anthropic, OpenAI, Google, Fireworks, OpenRouter, or local models through Ollama. Route sensitive work to a model that never leaves your machine. - Open source under MIT, so the privacy claims are verifiable in the code, and self-hosting is a first-class path. - One assistant across desktop, iOS, web, voice, email, Telegram, Slack, and phone. Text it like Instinct, or reach it everywhere else too. - Free cloud hosting when you create an assistant. Paid plans upgrade the machine, compute, and storage. **Trade-offs:** - The assistant becomes more useful as it learns your context, so the first few conversations require some teaching before it starts anticipating. - Usage-based credits apply to many actions beyond the included plan credits, so heavy users need to watch the meter. **Pricing:** Free, Mighty $30/month, Super $100/month, and Ultra $200/month. Paid plans include credits, with additional usage charged separately. Self-hosting has no platform fee. Anyone who signs up and creates an assistant gets free cloud hosting, and subscriptions upgrade the hosted machine, compute, and storage. **Compared to Instinct:** Both products bet that an assistant should act, not advise. The difference is what happens with your access. - **Permissions:** Vellum asks before sensitive actions and defaults to deny. Instinct's terms appoint it as your agent with binding authority, and launch week showed what that means in practice. - **Data:** Vellum lets you export or delete your data at any time, and self-hosting keeps it on your hardware entirely. Instinct retained inbox copies after a user disconnected the source, and its license to your materials is perpetual and irrevocable. - **Model choice:** Vellum lets you route tasks across providers or to a local model. Instinct runs one proprietary model. - **Availability:** Vellum is open to everyone today. Instinct is a waitlist. Instinct's zero-friction texting experience is genuinely good product design. Vellum matches the channels and adds the control layer Instinct hasn't built. ### 2. OpenClaw as an Instinct Alternative [OpenClaw](https://www.getopenclaw.ai) is the open-source personal AI assistant that popularized the category, running on your own hardware with messaging apps as the interface. **Score: 85** **Pros:** - Open source under MIT, free to self-host - Lives in Telegram, Discord, WhatsApp, and Slack - Works around the clock on your own machine - Large community and hosting ecosystem **Cons:** - You manage setup, security, and updates yourself - No native desktop or iOS app - BYOK model costs are yours to manage **Compared to Instinct:** OpenClaw is the original "assistant that does things," and the "OpenClaw for normal people" label tells you exactly what Instinct borrowed. OpenClaw gives you full control of the machine and the data but asks you to run it. Instinct asks for nothing but trust. Vellum ranks higher than both when you want the control and the polish without the server work. ### 3. Claude Cowork as an Instinct Alternative [Claude Cowork](https://claude.com/pricing) is Anthropic's desktop AI coworker for files, folders, applications, and repeatable knowledge work, included with paid Claude plans. **Score: 82** **Pros:** - Anthropic model quality - Desktop-native work on your local files - Included with Pro at $20/month **Cons:** - No free tier - Single provider, no self-hosting - Desktop-centric, no messaging presence **Compared to Instinct:** Cowork is the safer pair of hands for documents and knowledge work, backed by Anthropic's track record. Instinct reaches further into your life, with the access incidents to show for it. Vellum ranks higher when you want both the reach and the guardrails. ### 4. Hermes Agent as an Instinct Alternative [Hermes Agent](https://hermes-agent.nousresearch.com/) is Nous Research's open-source agent with persistent memory, self-created skills, and a messaging gateway for Telegram, Discord, Slack, and more. **Score: 79** **Pros:** - Open source under MIT, runs on your server - Persistent memory across sessions - Model freedom, including local runtimes - Real-time voice in the current release **Cons:** - Terminal-first DNA, you own the server - Memory is markdown files you manage - No managed consumer cloud **Compared to Instinct:** Hermes is the hobbyist's answer: total control, real memory, any model, your hardware. Instinct is the opposite trade, zero setup for total access. Vellum ranks higher when you want Hermes-style control with an install measured in minutes. ### 5. ChatGPT Work as an Instinct Alternative [ChatGPT Work](https://chatgpt.com) is OpenAI's agent surface for longer tasks, connected apps, browser work, and scheduled jobs inside the ChatGPT ecosystem. **Score: 76** **Pros:** - Familiar interface, huge ecosystem - Research, files, and deliverables in one place - Scheduled tasks and connected apps **Cons:** - Cloud-only, single provider - No self-hosting - No structured personal memory **Compared to Instinct:** ChatGPT Work is the mainstream choice with the distribution to match, and it covers research and document work well. Instinct is bolder about acting on your behalf, for better and worse. Vellum ranks higher when you want proactive assistance with permission controls instead of a terms-of-service leap of faith. ## Instinct Alternatives Comparison Table | Tool | Best For | Architecture | Pricing | Open Source | Key Differentiator | | --- | --- | --- | --- | --- | --- | | Vellum | Personal assistant with control over access and data | Desktop, cloud, or self-hosted | Free to $200/mo | Yes (MIT) | ⭐ Permission-gated by default, data export and deletion, model choice, free cloud hosting | | OpenClaw | Self-hoster who wants messaging-native control | Self-hosted, community cloud | Free, Cloud from $49/mo | Yes (MIT) | Original open-source personal assistant | | Claude Cowork | Desktop knowledge work | Desktop + cloud | From $20/mo, no free tier | No | Anthropic model quality | | Hermes Agent | Technical users who want a self-improving agent | Self-hosted | Free software, model costs vary | Yes (MIT) | Builds its own skills | | ChatGPT Work | Mainstream users in the ChatGPT ecosystem | Cloud | Varies by plan | No | Ecosystem reach | ## Why Vellum Stands Out Instinct earned its buzz. The willingness to finish a job instead of asking permission at every step is the behavior people have wanted from assistants for years, and hiding the machinery behind a text thread is smart product design. If you get an invite and you have a low-risk account to experiment with, it's worth seeing. What Instinct can't give you is a trust model you control. Your materials carry a perpetual, irrevocable license. Your screen, keyboard, and location are in scope. Actions bind you legally, and disputes go to arbitration. The first week of public testing produced a retention incident, a successful phishing test, and an email nobody approved. Maybe the company matures past all of it. The terms are written so it doesn't have to. The architecture difference that matters is who holds the keys. Vellum asks before sensitive actions, and the default is to deny. Your data can be exported or deleted at any time, or kept entirely on your own hardware through self-hosting. You pick the model, including local models that never send your context anywhere. And because Vellum is open source under MIT, every one of those claims is checkable in the code rather than taken on faith from a stealth startup's legal page. ### Vellum vs Instinct Vellum gives you the proactive, text-it-anytime assistant with a permission layer underneath. Instinct gives you the same ambition with broader authority and a terms-of-service trade. Both will book the restaurant. Only one of them shows its work. ### Vellum vs OpenClaw Vellum carries the self-hosted, open-source DNA without the server weekend. OpenClaw gives you full control if you're willing to run it. Vellum adds native apps, managed cloud hosting, voice, and a memory system that OpenClaw's messaging-first design doesn't match. ### Vellum vs Claude Cowork Vellum works across every surface you use, with model choice and a free tier. Cowork is a strong desktop citizen inside Anthropic's walls. Vellum is the pick when your assistant should live across your whole life instead of staying on your laptop. ### Vellum vs Hermes Agent Vellum and Hermes share the open-source, self-hostable, model-flexible philosophy. Vellum gets you there in minutes with native apps and managed cloud hosting. Hermes rewards the technical user who wants to tinker. Both beat a black box. [Get started with Vellum free →](https://www.vellum.ai) ## FAQs ### What is the best Instinct alternative in 2026? Vellum is the best Instinct alternative in 2026 because it delivers the same proactive, does-the-work assistant experience with permission controls on every sensitive action, data you can export or delete at any time, model choice including local models, and self-hosting as a real option. It's open source under MIT, free to start, and available today without a waitlist. ### What is Instinct? Instinct is an invite-only personal AI assistant from Spear Street Technology, Inc., a San Francisco company founded by former Sierra research scientist Noah Shinn. You text or call it, and it acts through connected accounts and a persistent cloud computer to complete tasks like bookings, bill negotiation, email follow-up, and scheduling. Vellum is a personal AI assistant that takes a different approach to the same ambition, pairing proactive assistance with permission controls and verifiable open-source code. ### How much does Instinct cost? Instinct is free during private access, and no pricing has been published. Forbes notes that both subscriptions and advertising against the agent's data access are available business models from here. Vellum has a published free tier and paid plans starting at $30/month, so you know the deal before you connect anything. ### Is Instinct free? Yes, for now, while it's in private access. Free with no announced business model is worth pausing on for a product that connects to your email, messages, screen, and location. Vellum's free tier is permanent and its paid plans are published. ### Is Instinct safe to use? Instinct had a documented first week: inbox data retained after a user disconnected Google, a successful email-based prompt-injection test by a security-conscious founder, and an email sent without approval. The company added a deletion tool after the retention report. Its own Privacy Notice warns about unintended communications, payments, and manipulation through hidden instructions. If you test it, use a low-risk account. Vellum's permission model asks before sensitive actions and defaults to deny. ### Does Instinct train on my data? By default, yes. The Terms of Service grant a perpetual, irrevocable, transferable, sub-licensable license over your materials including for AI model training. You can opt out at app.instinct.co/settings, but the opt-out is go-forward only and doesn't apply to safety review. Vault materials and Google Workspace API data are excluded. Vellum's docs state your data is yours to export or delete at any time, and self-hosting keeps it off third-party infrastructure entirely. ### Can I self-host Instinct? No. Instinct runs entirely on Spear Street Technology's infrastructure. Vellum is MIT-licensed open source with self-hosting as a first-class path, same codebase and data model as the managed cloud. If owning the machine matters, Vellum is the clear choice. ### Who owns Instinct? Instinct is operated by Spear Street Technology, Inc., a San Francisco company registered in April 2026 by Noah Shinn, previously a research scientist at Sierra, per Forbes' review of California filings. The company has raised a reported $250 million Series B at a $2.5 billion valuation led by Index Ventures and Benchmark. ### How do I get access to Instinct? You join the waitlist at instinct.co or get an invite from an existing member. The company says it's scaling compute, and there's no public timeline. Vellum is open to everyone: sign up, and your assistant wakes up in your browser in minutes. ### Is Instinct the same as OpenClaw? No. They aim at a similar outcome, but Instinct is a managed consumer product with no setup, while OpenClaw is open-source software you host and secure yourself. "OpenClaw for normal people" describes the positioning, not shared technology. Vellum sits between them: open source and self-hostable like OpenClaw, polished and managed like Instinct. ### Is Instinct or Vellum better for privacy? Vellum, by a wide margin. Vellum defaults to denying sensitive actions, supports self-hosting and local models, lets you export or delete your data at any time, and is open source so the claims are verifiable. Instinct's terms include device-level data collection and a perpetual license to your materials, and its first week produced a public data-retention incident. ### Is Instinct or Vellum better for non-technical users? Both work over plain text, but Vellum is the stronger pick for most people. It takes minutes to set up, costs nothing to start, works across desktop, iOS, web, voice, email, Telegram, Slack, and phone, and doesn't ask you to sign away perpetual rights to your data first. Instinct is waitlist-only with no published pricing. ## Extra Resources - [What Can a Personal AI Assistant Actually Do? (2026) →](https://www.vellum.ai/blog/what-can-a-personal-ai-assistant-do) - [How Vellum Remembers →](https://www.vellum.ai/blog/vellum-memory-system-breakdown) - [Official Grok Bot Breakdown (2026) →](https://www.vellum.ai/blog/official-grok-bot-breakdown) - [10 Best OpenClaw Alternatives in 2026 →](https://www.vellum.ai/blog/best-openclaw-alternatives) ## Citations [1] IEEE. (2025). [The Impact of Technology in 2026 and Beyond: an IEEE Global Study](https://transmitter.ieee.org/iot-2026). [2] Stanford HAI. (2026). [2026 AI Index Report](https://hai.stanford.edu/ai-index/2026-ai-index-report). [3] Perez, S. (2026). [Instinct's powerful AI assistant is raising privacy and security concerns](https://techcrunch.com/2026/08/24/instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns/). TechCrunch. [4] SQ Magazine. (2026). [AI Agents Statistics 2026: Adoption, Market Size & ROI Data](https://sqmagazine.co.uk/ai-agents-statistics/). [5] Spear Street Technology, Inc. (2026). [Instinct Terms of Service](https://instinct.co/terms). [6] Carly. (2026). [What Is Instinct AI? What Early Users Actually Found](https://www.usecarly.com/blog/what-is-instinct-ai/).