What it can do, how you stay in control.

It means the assistant can do the work, not just describe it. Aerenium can click, type, operate applications, and carry a multi-step job through to completion while keeping a reviewable action trail under your control.

Yes. Budget ceilings, sticky pause, and one breaker board keep the loop from running away with your money. Autonomous spending starts off, and you can stop the whole run or any sandboxed specialist worker.

Aerenium uses a memory algorithm that learns which combinations of past context lead to useful results. Its 16-cell matrix tests recall across four persistence levels: helpful combinations return, noisy ones fade, and the durable bedrock stays encrypted on your machine.

Free is BYOK-only and still includes agentic action, the controlled loop, memory, skills, recipes, and cited document answers. Discord voice, music, and system audio are labeled Plus / Pro / Pro Max / Enterprise. Managed usage comes as monthly credits with per-tier rate limits, plus optional packs.

A local-first desktop AI assistant. The app, your files, your memory, and your automation all live on your machine — the only things that leave it are the model calls you choose to make (through your own API keys, or through our credit proxy if you'd rather not manage keys). It watches, remembers, and acts across your whole desktop: files, clipboard, browser, Discord, audio, and a swarm of sub-agents for bigger jobs.

Windows 10 and 11 today. The core is Python + a web UI, so macOS and Linux are technically reachable, but we only ship and test Windows builds right now — we'd rather support one platform properly than three badly.

The app itself runs locally and your data stays available offline. Anything that needs a language model needs to reach one — either a cloud provider or a local model you run yourself. Licence checks are cached with a grace window, so a flaky connection doesn't lock you out of your own tool.

Bring your own keys for any major provider, or use proxy credits with no keys at all. The model catalogue is fetched live, so new models appear when providers ship them — we never pin you to a stale hardcoded list.

An account is the familiar thing: email or Google/GitHub sign-in, recoverable, required for anything that charges a card on a schedule. A token is the anonymous alternative: a 16-character string, minted for you instantly, no email ever. The token is the credential — like cash, whoever holds it holds the balance. Tokens buy prepaid time and credits; they can't hold recurring subscriptions, because a lost token must never keep charging someone's card.

A fresh empty token is minted right then and your browser is signed in with it. Your account page shows the token once, with a warning to save it — there is no recovery email. Purchases you make while signed in land on it automatically. Tokens that never receive any value are deleted after 7 days, so trying it costs nothing.

If you bound it to an account first (account page → token view → "Bind to my account"), yes — log in and it's there. If not, no — and that's not us being difficult, it's the entire privacy design: we hold nothing that connects you to it, so nobody (including us, including a subpoena) can connect it back either. Bind valuable tokens.

Yes. Account page → "Have a standalone token?" → paste it. Its days and credits move onto your account and the old token retires. If you want something shareable afterwards, mint a subtoken — that's what they're for.

Log into the one you want to keep, then link the other provider from your profile. When we detect the other provider already owns a separate account, a merge offer appears: everything (licences, credits, banked days, subtokens) moves into the account you're logged into, and the duplicate is permanently retired. The offer expires after 10 minutes and merging is irreversible.

Tokens minted from your account that you can hand to someone else — a kid, a friend, a second machine. They use it exactly like an anonymous token and never see your account. You stay in control: move banked days or purchased credits onto it, set a monthly auto-budget that tops it up from your pool, buy top-ups directly for it, or revoke it at any moment. Up to ten per account.

Display names are just name tags — they can collide freely because the account is identified by its internal ID, never by the name. Change yours any time; nothing breaks.

Subscriptions include a monthly allowance of proxy credits — model usage with zero key management, billed by actual token cost. Credits are the convenience path; bringing your own API keys is always available on every tier, with no credit accounting at all.

Allowances grow as you stay: Plus runs 10,000 → 15,000 → 25,000 credits/month over your first three months; Pro runs 30,000 → 45,000 → 75,000; Pro Max runs 80,000 → 120,000 → 200,000. Pay yearly, or prepay 90+ days at once, and you start at the full allowance from day one. The ramp resets only if your coverage actually lapses — an unbroken chain of subscription or banked prepaid time keeps your tenure.

Monthly credits refresh every 30 days and don't roll over — they're the plan's perk. Purchased credits (packs) are your property: they never expire, and they're only spent after your monthly allowance is used up. The account page shows both separately.

Every 30 days anchored to your purchase date — including yearly subscriptions and multi-month prepaid banks. Missed refreshes don't stack; it's a refill, not an accrual.

Three honest layers. First, volume: bigger packs carry a genuinely lower margin, so the credits-per-dollar rate really does improve with size — that's the discount, stated as what it is. Second, membership: Plus adds +10% and Pro or higher adds +20% on every pack, uncapped. Third, a one-time first-purchase double on select packs for logged-in accounts. No fake percentages, no inflated baselines.

Proxy usage pauses — no overdraft, no surprise bill, ever. Your own API keys keep working regardless. Buy a pack, wait for the refresh, or switch to BYOK. The app warns you as you approach the edge.

Your first-ever subscription comes with one automatically: 90 days on Pro, 7 days on Plus or Pro Max. Card is collected and verified at the start (a $0 authorization — no charge), nothing is billed until the trial ends, and cancelling during it costs nothing. It applies by itself at checkout when you're eligible.

Because credits are real money we pay upstream per token, and we'd rather give you a long honest trial of every feature than a short one padded with compute we'd quietly claw back elsewhere. During the trial: all features, bring your own keys or buy packs if you want proxy usage. Your monthly allowance starts with your first paid month.

No and no. Any prior subscription on the account — even a cancelled trial — uses the one slot; that's what keeps a 90-day trial economically possible. Token accounts can't trial at all: they have no identity, so one person could mint infinite trials.

A subscription auto-renews and needs an account. A top-up is prepaid time — 30 or 365 day units, no auto-renew, works for tokens and accounts alike, and the days bank. Different tiers stack as a ladder: your highest tier runs first, then the plan drops to the next one down. Buying a top-up while a subscription runs banks the days; they start counting the moment the subscription ends.

Yes — up to 36 periods per line (three years of a monthly unit), and multiple tier lines in one cart. It's one payment; the server banks everything as separate per-tier timers.

Two ways. At checkout, mark any top-up line as a gift: either you get a one-shot gift code on the receipt page to share with anyone, or enter a friend's account email and the days land on their plan the moment payment clears. From your account page, you can also gift days you've already banked. Gift codes are redeemed at aerethis.com/redeem. Gifts are always charged at full value — no discounts stack on them.

They're for giveaways and events, so the rules are strict: logged-in accounts only, one-time purchases only (top-ups, credit packs, storage — not subscriptions), never on carts containing gifts, and each code works once. Enter it in the cart before paying; the total updates immediately.

No — prices are tax-exclusive, and tax is added at payment based on your location (the checkout shows an estimate for your country before you commit). If your country applies VAT/GST, you'll see the exact amount on Stripe's payment page before entering your card.

The local-currency figures are live-rate estimates so you know roughly what you're paying — the charge itself is in USD and your bank does the conversion at its own rate. The checkout says this explicitly next to the total.

Yes. If Aerenium doesn't work for you, contact us within 14 days of purchase for a full refund — no questions asked, processed within 3 business days. Yearly plans refund prorated for unused months.

Encrypted snapshots of your workspace's text — notes, memory, configuration — compressed to roughly half a megabyte each. Nothing uploads unless you turn it on, and the entry plan's 100 MB already holds around 200 pinned moments. It's backup for the things you'd cry about, not a sync drive.

Both exist for every plan. Prepaid months and years work for everyone including token accounts, and simply run out. Auto-renew needs a login account and can be cancelled at any time — cancelling stops future charges and lets the period you already paid for run out fully, after which the normal lapse rules take over. Either way the promise holds: you are never billed for anything you stopped.

Nothing is deleted on day one. Your data goes read-only for a generous move-out window — you can download everything at no charge — and only after the window closes does deletion happen, with the app counting down the date so nothing is a surprise. Expansions freeze the same way without touching your base plan. The complete rules are written out on the cloud pricing page.

Yes — sign in (account or token) on the other machine and pull your snapshots. The encryption keys travel with your credentials, not with our servers.

Yes — themes, skills, and automation packages through the Skill Workshop. Your first upload grants a free modder licence. Mods run sandboxed: jailed workspace, scrubbed environment, no network by default, and a static scan before anything executes.

The author paid for a human review of that exact version and it passed. Updating a mod clears the badge until the new version is re-reviewed (at a discount) — a badge always refers to the code you're actually installing, never to reputation.

Local-first isn't a slogan, it's the architecture: your files, memory, and history live on your machine. Our servers see what billing requires (an email if you use an account; nothing if you use a token) plus the proxy requests you route through us. We don't profile by IP, we don't sell data, and token accounts are deliberately designed so that even we can't connect them to a person. What the server retains is written out plainly in the privacy policy.