~9 min
Instinct AI: What It Is, Privacy Concerns and Alternatives (2026)
Key takeaways
Instinct AI is a personal assistant you text or call, which completes tasks for you from its own computer and phone number, TechCrunch reports; it’s free during invite-only testing, according to Fortune.
Instinct’s terms, revised August 26, 2026, appoint the service as your agent to enter agreements that are “binding on you as if entered into directly by you.”
Instinct’s terms also let it train on your materials until you opt out, and disconnecting a service doesn’t erase what it already indexed; deletion is a separate request.
Early testers told TechCrunch about email summaries after disconnecting Google and a prompt injection through a crafted email, and tester Katie Jacobs Stanton said the agent sent an email on her behalf without checking with her first.
Instinct AI suits people who want an assistant that completes tasks over text and accept that it can act and agree on their behalf.
Instinct AI is a personal assistant you text or call, and it completes tasks for you from its own computer and phone number. It’s free and invite-only for now. Testers praise how much it gets done, while its terms let it bind you to agreements and train on your materials unless you opt out.
Alien makes Alien Agent, a personal AI agent that competes with some of the products covered here. We compare them on the same criteria and link to the sources behind every claim.
An agent that only does what you allow
Alien Agent is a private personal AI agent that acts for you while your data stays encrypted and out of anyone else’s reach. It only does what you’ve given it permission to do, and your data stays with you alone. Learn how Alien Agent works
What Instinct AI is and who makes it
Instinct AI is a personal AI assistant made by Spear Street Technology, Inc., which does business as Instinct, according to the company’s terms. Its founder, Noah Shinn, left university to join AI startup Sierra as one of the company’s first employees, Fortune reported. Instead of a mobile app, you reach the Instinct agent by text message or phone call, and it carries out tasks on its own computer and from its own phone number, according to TechCrunch, which describes Instinct as an invite-only service.
Instinct raised a $1 billion Series C at a $10 billion valuation in September 2026, from investors including Sequoia, Benchmark and Coatue, a month after a round at a $2.5 billion valuation, TechCrunch reported. Shinn is 23, according to Fortune, which covered Instinct alongside Meta’s Muse agent, and the company told Fortune that the transactions Instinct handles are approaching $1 billion a year.
This review is based on Instinct’s terms and privacy policy, its website and reporting by TechCrunch and Fortune. We haven’t tested Instinct ourselves.
How the Instinct AI assistant works
The Instinct AI assistant works by connecting to your accounts and devices, then acting on them when you ask by text or call. Its website says it connects to “email, messaging, screen, audio, location, and more.” Instinct’s terms also mention a macOS application, while there is no mobile app.
TechCrunch highlights two features. Concierge places phone calls for you, and a “trusted person network” lets your agent coordinate plans with your friends’ agents. Because Instinct works from its own number and computer, the people and businesses it contacts deal with Instinct’s agent on your behalf.
What the Instinct agent does well
The Instinct agent’s main strength is follow-through: testers quoted by TechCrunch in August praise how it carries complex tasks through to the end. Its other strengths are practical:
No mobile app. You text it like a person, so there’s nothing new to install on your phone.
Phone calls. Concierge calls businesses for you.
Coordination. Agents of friends who use Instinct can plan with each other.
Training opt-out. Instinct’s terms offer an opt-out at app.instinct.com/settings, and materials in the Vault are never used for training.
Where Instinct falls short
Instinct’s weak points so far concern data handling and actions taken without approval, most of them reported by early testers in August 2026.
Instinct’s first months, from the invite-only launch in August to the $10 billion round. Sources: TechCrunch, Instinct Terms, Fortune.
August 24, 2026: TechCrunch published tester reports.
Claire Vo disconnected Instinct from Google at 11 a.m. and got a summary of her email at 2 p.m.; Instinct told her the emails had been stored unencrypted for later search.
Alex Cohen showed that a specially written email could steer the assistant, then deleted his account.
Peter Yang said deleting his Gmail data didn’t work at first, and Instinct later added a deletion tool to settings.
Katie Jacobs Stanton said the agent “sent an innocuous email on my behalf without checking with me first.”
August 26, 2026: Instinct revised its terms and privacy policy. The earlier terms granted Instinct a “perpetual and irrevocable” license to user materials, including for training, according to TechCrunch; the current terms no longer use that wording.
September 28, 2026: Instinct announced its $10 billion valuation, per TechCrunch.
After the August reports, the company told The Wall Street Journal it takes security seriously, according to TechCrunch.
What Instinct’s terms say about your data
Instinct’s terms and privacy policy, both revised August 26, 2026, set the rules that decide what happens to your data and your commitments, and each rule below sits next to what it means in practice.
What the terms say | What it means for you |
|---|---|
You “appoint the Services as your agent to enter into agreements, commitments or transactions on your behalf,” binding “as if entered into directly by you” | Under the terms, agreements Instinct makes for you bind you as if you made them yourself |
Instinct may use your materials for “training AI models”; you can opt out at app.instinct.com/settings | Training is on until you turn it off, and Instinct’s privacy policy describes the opt-out as applying going forward |
Materials “flagged for safety review” can still be used for training after you opt out; materials in the Vault are never used for training | Opting out doesn’t cover everything; the Vault is the exception |
“Even if you disconnect a Connected Service, we may still use the indexed Connected Service Input data” until you request deletion at app.instinct.com/workspace | Disconnecting doesn’t remove what Instinct already indexed; deletion is a separate request |
The privacy policy lists keystrokes, clicks and cursor positions, precise location if you share it, audio if you enable it, and content from connected email and messaging | The data Instinct can hold goes well beyond your texts with it |
Sources: Instinct Terms of Service and Privacy Policy, revised August 26, 2026. Checked October 2, 2026.
Under these terms, two protections depend on steps you take yourself: opting out of training at app.instinct.com/settings and requesting deletion at app.instinct.com/workspace.
The privacy policy also states that Instinct doesn’t sell your personal data and that data from Google Workspace isn’t used for training or ads. Closed beta testers agree not to post screenshots or videos of beta features without Instinct’s prior written consent, according to the terms.
Is Instinct AI safe?
Instinct AI is as safe as the access you give it and the settings you change, because its defaults allow training and keep indexed data after you disconnect. On Alien’s standard comparison criteria, Instinct looks like this:
Data access: Email, messaging, calendar, screen, audio and location, depending on what you connect.
Where data is processed: Instinct’s cloud.
Training and ads: Training on your materials unless you opt out; Instinct says it doesn’t sell data, and Google Workspace data isn’t used for training or ads.
Permission control: Per connection, with terms that let the agent make binding agreements for you.
What Instinct hasn’t disclosed
As of October 2, 2026, Instinct’s website, terms and privacy policy don’t answer these questions:
How long indexed data is kept if you never request deletion.
Which actions the agent takes without asking you first.
Who at Instinct can access stored email.
For the current rules, Instinct’s terms and privacy policy are the documents to check. A comparison with Meta’s approach is in how Meta Muse handles connected accounts.
“The detail I’d focus on is what disconnecting means. If unplugging an account doesn’t make the agent forget what it read there, you never had full control in the first place. Making deletion a separate request is a design choice, and I think people should know about it before they connect their inbox.”
— Kirill Avery, founder of Alien
Pricing and availability
Instinct AI is free during its invite-only testing, according to Fortune. Each account gets five invites, and Fortune reported that invitations are being resold on eBay. Instinct hasn’t published paid plans on instinct.com as of October 2, 2026.
Verdict: who should use Instinct AI
Instinct AI fits people who want an assistant that finishes multi-step tasks over text, as testers describe, and are comfortable with a cloud service that can act and agree on their behalf. People who handle sensitive email, or who want their data gone the moment they disconnect, should read the terms first: training stays on until you opt out, and deletion is a separate request.
Alternatives to consider
If Instinct’s terms don’t fit you, these alternatives handle data differently. Each is compared on the same criteria in personal AI agents compared on data access.
Alien Agent. Alien Agent is a private personal AI agent that logs into the services you already use and gets things done for you. Your data is encrypted with your own key and processed in secure hardware that Alien itself can’t access, your passwords stay in a vault the agent never sees, and it only does what you’ve given it permission to do. Your data is never used for ads and never sold. It’s in closed testing, with access by invite code.
Town. An email-based assistant whose trust page says training is off by default and whose documentation describes a read-only mode; it runs only in Town’s cloud, and its code isn’t open for inspection.
Claude Cowork. Anthropic’s agent reaches only the folders and tools you choose and needs your approval to delete files, according to its product page; it requires a paid Claude plan.
OpenClaw. A free, open-source agent you run yourself; you control the data and take on the security work. More in OpenClaw alternatives.
Sources
Terms of Service, Instinct, revised August 26, 2026, accessed October 2, 2026.
Privacy Policy, Instinct, revised August 26, 2026, accessed October 2, 2026.
Instinct, Instinct, accessed October 2, 2026.
Instinct’s powerful AI assistant is raising privacy and security concerns, TechCrunch, August 24, 2026.
Viral AI agent Instinct raises $1B Series C at a $10B valuation, TechCrunch, September 28, 2026.
Meet Noah Shinn: The 23-year-old college dropout whose viral AI assistant is emerging as a new challenger to Mark Zuckerberg’s Meta, Fortune, September 30, 2026.
Trust, Town, accessed October 2, 2026.
Town Docs, Town, accessed October 2, 2026.
Claude Cowork, Anthropic, accessed October 2, 2026.
AMD Instinct GPUs, AMD, accessed October 2, 2026.
About the author
Kirill Avery is the founder of Alien AI Agent, a personal AI agent built around privacy and verified identity. He started building with machine learning at 12, became the youngest developer at VK at 14, and went through Y Combinator. · Author page · X · LinkedIn · Editorial policy
Founder of Alien
Writes about decentralized identity and proof of humanity
FAQs
How do I get an Instinct AI invite?
Instinct AI is invite-only, and each account gets five invites, according to Fortune, which also reported that invitations have been resold on eBay. Instinct hasn't announced a public waitlist or a date for opening access more widely as of October 2, 2026. Instinct's terms apply from the moment you sign up, whoever sent the invite.
Can I stop Instinct from training on my data?
You can opt out of training at app.instinct.com/settings, according to Instinct's terms. The opt-out applies going forward, so materials already used for training before you switch it off aren't covered, per the privacy policy. Materials flagged for safety review can still be used for training, while materials in the Vault are never used for it.
How do I delete my data from Instinct?
Instinct's terms say deletion requests for indexed data go through app.instinct.com/workspace. Disconnecting a service doesn't remove indexed data on its own, because the terms say Instinct may keep using it until you request deletion. Instinct added a deletion tool to settings after tester Peter Yang reported that deleting his Gmail data didn't work at first, according to TechCrunch.
Is Instinct AI the same as AMD Instinct?
Instinct AI, the texting assistant from Spear Street Technology, is unrelated to AMD Instinct GPUs, AMD's line of data center GPUs for AI and high-performance computing. Searches for "Instinct AI" often return both. This article covers only the personal AI assistant at instinct.com, which you reach by text message and phone call.
Who owns Instinct AI?
Instinct AI is run by Spear Street Technology, Inc., which does business as Instinct, according to the company's terms. Its founder, Noah Shinn, is 23 and left university to join AI startup Sierra as one of its first employees, according to Fortune. Investors include Sequoia, Benchmark and Coatue, which backed a $1 billion Series C at a $10 billion valuation in September 2026, according to TechCrunch.
We raised $7.1M from Initialized, Finality and others. Read more