Your records

Every conversation in Your Own AI - in-app chat, project sessions, and calls from external apps - is written into a signed, tamper-evident record on your device as it happens, encrypted with a key only you hold. The records use the same machinery as Flowsta's tamper-proof network, sealed to your own machine.

What a record holds

The words, the model that spoke them (and where it ran) - and, for models on your device, a fingerprint of the exact model file that produced the answer: the name says what the file claimed to be, the hash proves which weights said it - the mode, token counts, web sources it cited, the hash of every document it was shown, the system prompt, and the AI's thinking. Enough that "what did the AI actually say?" always has a precise answer.

Where you see them

The Memory page lists each AI's conversations with a verification hash on every one. Expand a conversation to read the full transcript with its provenance - attached context with content hashes, images, sources, and grounded quotes. Conversations from external apps carry an "API" badge.

What you control

• Continue any conversation where it left off.
• Rename conversations to keep the list yours.
• Export any conversation as a readable file - see Export and receipts.
• Delete conversations individually, or erase everything with Settings → Reset. Your device is the only place they exist (plus your own Vault backup, which is also yours).

Sealed on your device - what that gives you

Your records are kept with the same machinery behind Flowsta's tamper-proof network, pointed at your own machine and nowhere else. In Your Own AI it works like this:

• Every AI signs its own record - it has its own cryptographic keys and writes its own sequence of entries. Each entry is signed by the AI's key and sealed against the one before it, so nothing can be inserted, removed, or altered without breaking verification of everything after it. The app shows you each entry's hash.
• Only your own AIs take part. Each of your AIs keeps its own record, no one else's data is in it, and the only participants are your own - the machinery that normally keeps strangers honest is used to keep your own history honest.
• Encrypted before it is written. Message content is encrypted with a key only you hold before it reaches the record; the record holds the ciphertext and the signed, hashed structure around it.
• Sealed. The part that would normally talk to other machines is pointed at nowhere - your records never leave your device unless you export or back them up yourself.
• Honest about change. Editing a record after the fact isn't possible without breaking its verification. Deleting a conversation writes the deletion into the record rather than rewriting history.
• Honest about timing. A turn taken while your records are still starting after launch, or while they are too busy to answer, is recorded once they are - and a slow read never empties the conversations list.

Provenance, end to end

Because every entry is signed and sealed in sequence, provenance runs all the way through:

• Who and when - which AI (its own key) wrote the entry, and the time it was written.
• Which model, exactly - the model's name and where it ran, and for models on your device a fingerprint of the exact model file that produced the answer. The name says what the file claimed to be; the hash proves which weights said it. Answers from online models carry the provider's claim; your own machine's carry proof.
• What it was shown - the system prompt, the hash of every document it read, the web sources it cited, the images attached, and its own thinking when that was recorded.
• Where a memory came from - a memory points at the moment in the record it was learned from, so recall can be traced to its source (see Memory).
• Beyond your device, by choice - export a conversation as a receipt and sign it with your Flowsta identity; its hash is published to Flowsta's tamper-proof network, so anyone can verify the exact file at flowsta.com without trusting you or us (see Export and receipts).

Why signed?

Because AI is doing real work now, and platforms where history can be quietly edited can't answer for it. A signed record can't be changed after the fact without breaking its verification - not by you, not by us, not by anyone.