News · Learn · November 6, 2026
Why Ghostdrive exists: your memory should not be for sale
AI is where we now think. Ghostdrive seals that memory on your device, keeps it on a network that cannot read it, and leaves a receipt for every use.
DRIVE 369 DAO · 2 min read
We now tell our AI more than we tell most people: drafts, health worries, contracts, ideas we are not ready to share. That memory is becoming the most valuable thing we own, and today it lives on someone else's servers.
In December 2025, Meta acquired Limitless, the company behind Rewind, an app that recorded people's screens and conversations to give their AI a memory. Its users were offered an export button. Their memory had been bought along with the company.
Ghostdrive is built so that this cannot happen.
Sealed before it leaves
Every file, note and piece of AI context is cut into blocks of at most 256 KiB and encrypted on your device with AES-256-GCM. The keys come from your passkey or your 24 recovery words and never leave you. Nodes, relays and gateways only ever see sealed blocks. Encryption costs 0.07% extra storage and runs at 422 MB/s on an Apple M5 Pro (benchmarks).
Kept by strangers, read by no one
Sealed blocks travel peer to peer between your devices and the nodes that keep them. Every block is named by its fingerprint and checked on every read, so nobody can slip in false data. Nodes prove they still hold your data by answering random challenges; anyone can check a proof over 32 random pieces in 14 ms.
Every use leaves a receipt
An AI may use your data only under a grant you signed, for a stated purpose, with an expiry. Each permitted use leaves a signed receipt on an evidence ladder from E0 (submitted) to E6 (settled), chained so that a missing or altered receipt shows. You do not have to trust what an AI did with your data: you can check it.
Owned by the people who build it
Ghostdrive is open source (Apache-2.0 / MIT) and governed by the DRIVE 369 DAO. Values are decided one person, one voice on the kernel board. Testnet points are earned only for work anyone can check: storage proofs, merged pull requests, accepted bug reports, knowledge that passes evaluation, proposals that stand. We pay for work, not posts.
What works today
- Live: Drive, notes, memory search, a private model on your device, Office, Terminal, calls, the desktop app for Mac, the MCP server and SDK for agents.
- Testnet (Base Sepolia, audit pending): the storage market, the registry anchor, the mining vaults and the DAO.
- Planned: mainnet on March 6, 2027, after an external audit.