AI that never phones home. Your conversations stay on your device. Always. No account. No subscription. Nothing leaves your device.
Free for 14 days. Then €29.99, one-time. No monthly fee. No renewal. No subscription.
Every word generated on your device. No cloud. No server. Every screenshot below came out of the app running in airplane mode.
ChatGPT, Claude, and Gemini need servers, accounts, and a connection. Airplane AI needs your device.
| Feature | Airplane AI | ChatGPT | Claude | Gemini |
|---|---|---|---|---|
| Price | €29.99 once | $20/month | $20/month | $20/month |
| Cost over 12 months | €29.99 total | $240+ | $240+ | $240+ |
| Works offline | ||||
| Data stored on servers | Never | Yes | Yes | Yes |
| engineered for on-device work | by architecture | ⚠ by policy only | ⚠ by policy only | ⚠ by policy only |
| on-device | ||||
| Account required | None | Required | Required | Required |
| Rate limits / usage caps | None | Yes | Yes | Yes |
| Trains on your inputs | Never | Yes (opt-out) | Yes (opt-out) | Yes |
| Works on a plane / no signal |
Scroll right to see all columns →
Most cloud AI tools hand you a Data Processing Agreement and call it GDPR compliance. A DPA is paperwork that governs a data transfer you should not have needed in the first place. Airplane AI has nothing to agree to, because there is no data transfer. Not a packet. Not a row. Not a byte. Your device reads the input, the local model writes the answer, the conversation sits in the macOS App Sandbox. The entire GDPR machinery around processors, controllers, and cross-border flows simply does not light up.
This is their AI, on their computer. You buy Airplane AI once, the model sits inside the app bundle, and every token it produces is computed by your own device's CPU and GPU. The developer is not your processor under GDPR Article 4, because there is no processor: you are the only party involved. No server read your prompt. No vendor saw your answer. Nothing leaves your machine.
Article 28 requires a signed DPA when you send personal data to a third-party processor. Airplane AI does not send personal data anywhere. No DPA, no Standard Contractual Clauses, no appendix of approved sub-processors. Your legal team can close the tab.
Medical records, legal files, employee data, therapy notes, biometrics, data on minors. Under Article 9, processing these in cloud AI is a legal minefield of explicit consent, derogations, and impact assessments. With Airplane AI, there is no cloud processing. The obligation does not arise, because the trigger does not fire.
Schrems II, Schrems III, the Data Privacy Framework, the next framework that replaces it: all of them worry about EU data flying to the United States. Airplane AI is not a data flow. Your device is the whole system. The GDPR Chapter V obligations do not apply, because there is no transfer to gate.
Article 22 regulates automated decisions that produce legal or similarly significant effects. Airplane AI only generates text when you press Send. Nothing is applied to you. Nothing scores you. Nothing ranks you. You are the decision maker, always.
Open Activity Monitor, Network tab, filter for Airplane AI. Watch bytes-sent stay at zero. Open the app bundle's entitlements file: there is no network-client or network-server key. Every build is blocked at CI if any network symbol (URLSession, NWConnection, WKWebView) appears in the binary. Policy is easy to change. This is not a policy.
An NDA is a Non Disclosure Agreement. The one verb it prohibits is disclosure to a third party. Airplane AI has no third party to disclose to. The app has no network entitlement, so the operating system itself blocks every outbound connection. Nothing you type, paste, or dictate ever leaves the device in front of you. That is the contract your NDA was trying to enforce, written into the binary.
The core concern in every confidentiality clause is disclosure to third parties. Airplane AI removes the disclosure vector entirely. Your prompts are processed locally and never transmitted anywhere. There is no third party to disclose to, no training pipeline to leak into, no vendor logs to subpoena, no employee to read a log.
Draft NDAs. Review contracts. Summarize deposition transcripts. Analyze deal memos. Work that your NDA would never allow you to paste into ChatGPT is safe in Airplane AI, because nothing leaves the room.
The app ships with a single entitlement: app sandbox. No network access entitlement exists. Your legal team or DPO can read the entitlements file in under a minute and confirm: outbound connections are architecturally impossible.
* NDA stands for Non-Disclosure Agreement. The D is for Disclosure. Airplane AI discloses nothing to anyone. Your data never leaves your device. It cannot. That covers the disclosure angle completely. But every NDA is different. If yours contains clauses beyond non-disclosure, such as restrictions on tools, software categories, or specific obligations around AI use, read those carefully. Airplane AI does not know what else is in your NDA. Nobody does except you and the other party.
If you would feel safe opening a file in Excel, you can feel much more secure opening it in Airplane AI. Modern office software connects to more servers than you care to know. Airplane AI connects to none. The AI is just a file on your computer.
Yes. The CSV is read on your device and extracted to text by the app, entirely on-device. No row, no name, no email, no phone number leaves this machine. Unlike ChatGPT, Copilot, or Gemini, where every pasted row becomes part of a vendor's request log.
Yes. Paste the PDF or drag it into the chat. Apple PDFKit extracts the text on your device. Airplane AI reads the text locally. The contract, the clauses, the counterparty, the dollar amounts, none of it leaves your device. There is no outbound path to leak through.
Yes. GDPR Article 9 sensitive categories. Attorney-client privileged material. Employee information. Cloud AI turns every paste into a cross-border transfer. Airplane AI keeps the paste inside the macOS App Sandbox and inside your building.
Yes. Unreleased code, patents in flight, unannounced launches, M&A draft memos. None of it is indexed, logged, or sent to a training pipeline. There is no training pipeline. The model is frozen, bundled, and read-only.
Yes. FERPA in the US, national data-protection laws in the EU. Cloud AI makes every student essay a disclosure event. Airplane AI makes it a local file operation. Your device reads it, the local model summarises it, you close the app, done.
Yes. Open Activity Monitor, Network tab. Filter for Airplane AI. Watch the bytes. They stay at zero. Check the app's entitlements file. There is no network entitlement to grant or revoke. A DPO can verify this in under ten minutes without trusting any marketing claim. The macOS sandbox is the proof, not the copy.
Not by policy. Not by promise. By kernel-enforced macOS sandbox. The entitlements file has no network key, so the operating system refuses outbound connections for the app.
| App | Licensing / update ping | Telemetry & analytics | Your content | AI prompts |
|---|---|---|---|---|
| Airplane AI | Apple StoreKit at purchase only | None | Stays on your device | Stays on your device |
| Microsoft Excel 365 | Continuous licensing & sync | Connected Experiences on by default | Uploaded to OneDrive if AutoSave on | Every Copilot prompt to Microsoft servers |
| Google Sheets | Continuous | Always on, Google account tied | Lives on Google's servers by design | Every Gemini prompt to Google |
| ChatGPT Desktop | Continuous | Every session, tied to your account | Every attachment to OpenAI | Every prompt to OpenAI |
| Notion | Continuous | Always on | Every page on Notion servers by design | Every Notion AI prompt to Notion + OpenAI |
| Slack | Continuous | Always on | Every message on Slack servers by design | Every Slack AI prompt to Slack |
Figures reflect the default configuration of each product as shipped in 2026. Enterprise plans can sometimes narrow the scope with paid contracts and data-processing agreements. Airplane AI needs no plan upgrade and no DPA, because there is no data transfer to agree on in the first place.
Every other AI stops when your connection does. Airplane AI keeps going. Always.
The model runs entirely on your device's GPU. No ping to a server. No loading spinner waiting for a response. Turn on airplane mode right now and ask anything. It works because there is nothing to connect to.
Conference Wi-Fi with 500 people on one router. Train tunnels at 250 km/h. Underground car parks. Remote job sites. Wherever you are when you need to think, Airplane AI is already there.
Many enterprises block external AI services at the firewall. Airplane AI makes no outbound connections, so there is nothing to block. It works on the most locked-down corporate network because it does not use the network at all.
Every other AI sends your words to a cloud server. That's why your compliance team said no. Airplane AI is different. Everything stays on your device.
Client confidentiality isn't optional. Airplane AI never touches your client data. It never could. There is no server to send it to.
Patient data stays in the room. GDPR Article 9 and HIPAA apply to cloud AI. They don't apply here, because nothing leaves your device.
Every engagement is under NDA. Your client's strategy goes nowhere. Not to OpenAI. Not to Anthropic. Nowhere.
Salary data, performance reviews, M&A strategy. Numbers stay in the room. Like a good CFO.
Pre-publication data is your IP. Your research trains nothing. Not now, not ever, not in a future update.
ChatGPT costs $240/year. Airplane AI costs €29.99 once. No renewal. No subscription. Updates within the current major version are included.
Cloud AI: offline. Airplane AI: keeps going. Works at 35,000 feet. Works in the subway. Works in the middle of nowhere. No signal needed.
Client contract. Patient notes. M&A strategy. Airplane AI never leaves your device. Your prompt never touches a server. Not even for a millisecond.
And they were right. Airplane AI is engineered to keep your content on your device, not by checkbox. No data transfer means no data transfer risk. The obligation doesn't exist if the transmission doesn't exist.
Upgrade, wait, or switch to the slower model. Airplane AI has no limit. Nobody else is on the queue. It's your device. It runs as fast as your device runs.
You get the full app free for the first 14 days, no card required. After that, one payment of €29.99 unlocks the current major version for good. No monthly bill, no seat licence, no renewal. Here is what the industry actually charges per year for comparison, from entry plans to the flagship ones that keep showing up in headlines.
Break even vs. the cheapest subscription in six weeks. Break even vs. Google AI Ultra in under four days. After that, every month is free. No renewal. No seat licence.
Public list prices, consumer tiers where available, monthly rates converted to annual. Enterprise plans, education discounts, and annual prepayment discounts vary. Airplane AI has one price, one payment, within the current major version.
No account. No setup. No API key. Just AI on your device.
The AI model is bundled inside. Nothing to configure, no separate download, no account to create.
Loads onto your device's GPU. Ready in seconds. Works without Wi-Fi from the first launch.
Type, paste images, dictate with your voice. Everything stays on your device. Nothing is sent anywhere.
Most AI tools say "we respect your privacy." Airplane AI does not need to. The app physically cannot send your data anywhere. macOS enforces that at the kernel, not in a terms of service.
Not "we don't send your data." The operating system prevents it. The build pipeline checks this on every release. You can verify it yourself: open Activity Monitor, search for Airplane AI, check the Network tab. Zero bytes. Always.
No email. No login. No payment history linked to your questions. The app can't know who's asking what. There's no connection between you and any server at all.
The AI model is frozen. It cannot learn from you. Your conversations are stored only in your own device's local storage, and only if you want them to be.
No abstraction layer. No magic. Just a quantised language model running locally inside a sandboxed Swift app on Apple Silicon. Everything below is verifiable from the shipped .app bundle.
One model file in GGUF format, around 5 GB, shipped inside the .app bundle. On first launch the file is verified against a SHA-256 hash, then memory-mapped, so re-launches are fast and the model never has to be downloaded. There is no model picker, no remote fetch, no fine-tune service. One model. One file. One hash.
Inference runs through llama.cpp, compiled into the app and pinned in Package.swift by full Git commit hash, never a branch, never a floating version. The Swift wrapper is a strict-concurrency actor. Tokens stream out through an AsyncThrowingStream. Cancellation is under 150 milliseconds from button press to engine idle.
Airplane AI ships with the macOS App Sandbox turned on and exactly three entitlements: app-sandbox, device.audio-input, and files.user-selected.read-only. There is no network-client key. There is no network-server key. macOS itself refuses every outbound connection the binary could try to make. You can read the .entitlements file inside the app bundle and see the full list yourself.
Every release build runs a scan that fails if the binary contains URLSession, NWConnection, WKWebView, Sparkle, or any analytics or crash-reporting SDK. The entitlements file is diffed against an allow-list. The model file is hashed against the manifest. If any of those checks fail, the build does not ship.
When you drop an image, paste a screenshot, or attach a PDF, Apple's Vision framework runs locally on your Mac. VNRecognizeTextRequest extracts printed text and handwriting. VNClassifyImageRequest tags the content. VNDetectDocumentSegmentationRequest flags whether the image is a document. The extracted text is shown to you in the composer before it is appended to the prompt, so you see exactly what the model sees. The model itself stays text-only.
Dictation goes through Apple's SFSpeechRecognizer with requiresOnDeviceRecognition set to true. If macOS reports that on-device recognition is unavailable for your language, the app refuses to record. It never falls back to a server-routed recogniser.
A configurable global hotkey, registered through the macOS Carbon API (default ⌥⌘S), captures every connected display. Each capture appears as a chip above the composer. The Vision pipeline runs on every chip locally, the extracted text is appended to the draft, and Airplane AI is brought to front. The images and the extracted text never leave the machine.
Open Activity Monitor, switch to the Network tab, filter for Airplane AI. Watch the bytes-sent column. It stays at zero, even while the app is generating. Then right-click Airplane AI.app, choose Show Package Contents, open Contents/Resources/AirplaneAI.entitlements. The list of allowed entitlements is right there in plain XML. No network key, no fallback path.
Free for 14 days. €29.99 once after that. One payment on the Mac App Store, no renewal, no account. Works offline, anywhere your device goes.
Airplane AI makes no outbound network connection at any time, under any circumstance, whether initiated by the user or automatically. No user content (text, audio, image, chat history, metadata) ever leaves the device. The only network traffic the operating system may perform on the app's behalf is Apple's StoreKit flow for in-app purchase and receipt validation, which carries no user content and is triggered only by an explicit user action on the purchase or restore screen.
