Live data from Hacker News

Limitless: Personalized AI powered by what you've seen, said, and heard

limitless.ai

1–10 of 92 posts

Re: Limitless: Personalized AI powered by what you've seen, said, and heard

#3

Any data privacy experts here? Could someone explain how data encryption and decryption work here? https://www.limitless.ai/#privacy

They don't really give any specifics and I'm not sure if they give you the keys or explain how the keys are derived (which I assume must be based on your login if they don't make you enter it otherwise they must be able to decrypt it whenever they want) but they mention they worked with Latacora[1]. Also curious if anyone else has any ideas on how they prevent themselves from being able to decrypt user data while implying they're not using E2EE[1].

[1]: https://help.limitless.ai/en/articles/9130680-privacy-with-l...

Edit: I just tried it. They don't give you encryption keys you need to enter when signing in and the server literally sends you your transcripts with no encryption. Maybe they're including a key somehow derived when signing in with Google/a magic link in the request, but I don't think anything would stop them from just logging API responses even if that was the case. They're definitely not using E2EE. They might just be encrypting at rest and storing their keys in AWS KMS which sounds like false advertising.

Re: Limitless: Personalized AI powered by what you've seen, said, and heard

#4
I really wish someone would make a pendant like this which is focussed on local-only use. It could connect to a mobile app or computer for transcription and summarisation, but using local models or an API key that the use chooses. I would pay serious money for a device high quality that did this (>$500) if it was backed by open-source platform/infrastructure for processing the managing the audio. Even better if it was written as an extension or fork of something like obsidian, or if the data structures were fairly open and there was an API for querying the data in interesting ways.

Recording and processing audio locally is something I already do. But there's absolutely no way I'm EVER going to trust a startup with this sort of data, any anyone in any serious job would almost certainly be unable to use it for work.

I guess the risk is that someone would sell a crappy pendant that uses the same software, but I still think there's a potential niche here for people who want something that just works.

I'd also purchase the software from the App Store if it was otherwise only available as a non-signed binary.

Re: Limitless: Personalized AI powered by what you've seen, said, and heard

#5
post #3

Any data privacy experts here? Could someone explain how data encryption and decryption work here? https://www.limitless.ai/#privacy

They don't really give any specifics and I'm not sure if they give you the keys or explain how the keys are derived (which I assume must be based on your login if they don't make you enter it otherwise they must be able to decrypt it whenever they want) but they mention they worked with Latacora[1]. Also curious if anyone else has any ideas on how they prevent themselves from being able to decrypt user data while imp…

I was going to buy it, but this lack of privacy explanation scares me.

Re: Limitless: Personalized AI powered by what you've seen, said, and heard

#6
post #3

Earlier quoted context omitted.

They don't really give any specifics and I'm not sure if they give you the keys or explain how the keys are derived (which I assume must be based on your login if they don't make you enter it otherwise they must be able to decrypt it whenever they want) but they mention they worked with Latacora[1]. Also curious if anyone else has any ideas on how they prevent themselves from being able to decrypt user data while imp…

I was going to buy it, but this lack of privacy explanation scares me.

Just added some additional context from trying it which might make you glad you checked.

Re: Limitless: Personalized AI powered by what you've seen, said, and heard

#7
post #6

Earlier quoted context omitted.

I was going to buy it, but this lack of privacy explanation scares me.

Just added some additional context from trying it which might make you glad you checked.

Thanks!
Post reply on HN