Your Personal AI That Actually Does the Work.
BackBrain is an AI operator for your Windows PC. Create spreadsheets, collect PDFs, and send approved reports using your real browser, apps, and files. Passwords stay on your PC. You approve sensitive tasks. An Android companion is optional.
- Runs on your Windows PC. An Android companion is optional. Your files, transcripts, and learning stay on your machine.
- It reads the live page or app and decides the next step. It is not a script written for one site.
- It can create Excel workbooks, PowerPoint decks, and Word documents, and it does not call a download finished until the file is on disk.
- Repeat chores can get easier because it remembers what worked. Reasoning calls may still be needed.
Free during private beta · Watch the Demo
What It Does
What BackBrain Does
Real chores, finished — on the real websites and apps you already use.
You might say: download last month’s statement from my bank and send it to my accountant. BackBrain opens that bank’s own website in your browser, uses a password from the vault on your PC when you allow it, waits for a one-time code (you can type it; automatic phone relay is not guaranteed), sets the dates, and downloads the file. It checks the file is really on disk. Then it opens WhatsApp Desktop or email and sends only after you approve.
The same pattern works for other portals, folders, and documents. It can build an Excel workbook, a PowerPoint deck, or a Word file from material you already have. It does not give tax, legal, or accounting advice. You review anything that will be submitted.
Passwords and one-time codes stay on your PC and are not logged. Other task text can reach a cloud model you chose. Local-only mode blocks those calls; it is a setting, not the default.
Every run ends with a searchable transcript and a tamper-evident audit record, so you can see exactly what was done.
Illustrated Task Walkthrough
See a Real Task, Start to Finish
Watch it plan, drive the screen, ask for what it needs, and check what it can verify.
- Watch it read the live page and explain its next step in plain language.
- A send waits for your approval.
- You can enter a one-time code on the PC. Automatic phone relay is not guaranteed in this beta.
- See it verify the downloaded file exists before it says "done".
- Open History afterward and read the full transcript of the run.
The Fundamental Gap
Why a cloud sandbox can’t do your real work
A cloud operator runs in someone else’s browser. It cannot reliably reach the desktop apps and folders on your PC. BackBrain runs where the work already is.
Cloud-Sandbox AI
- Your desktop apps: usually unavailable
- Your files: often an upload first
- Your phone: often disconnected
- Learning: often starts cold
- Document creation varies
BackBrain on your PC
- Your desktop apps: yes, on your Windows PC
- Your files: works in your folders. Organize never means delete
- Your phone: optional Android companion for approvals and instructions. Automatic one-time codes are not guaranteed
- Learning: remembers verified steps on your PC. A changed page goes back to live reasoning
- Documents: can create Excel, PowerPoint, and Word files on your PC
Full Capability Suite
Everything Your Digital Life Demands
One operator for the browser, desktop apps, files, email, and an optional phone companion, under rules the model cannot turn off.
Any website
It uses the site’s normal pages. There is no script per bank or per portal. Success still depends on the site, the login, and your approval.
Desktop apps
It can drive installed Windows apps when that is the direct path.
Files and documents
Rename and file by what is inside the document. Create Excel workbooks, PowerPoint decks, and Word files. Merge, split, and fill PDFs. Organizing does not delete.
Linked Gmail or Outlook. Read and search for the task. Send only after approval. It cannot permanently delete mail.
Android companion
Pair on your Wi-Fi. Approve and send instructions to the PC. Not a full second operator, and not a guaranteed one-time-code reader.
Connectors
Built-in tools, plus MCP servers and REST recipes you add.
Memory
It keeps verified successes on the PC so repeat work can be easier. Reasoning calls may still be needed.
More than one helper
A run can use helper reasoning. Helpers do not get your vault or a private bypass around approval.
Complete Capability Matrix
The Complete Capability Matrix
The capabilities of this Windows private beta, under the same approval rules.
- Open pages, click, type, scroll, download, and upload in Chrome or Edge
- Human-like mouse and typing; reads the live page
- Screenshots when needed. Credential screens are not sent to cloud models
- Type or paste a one-time code, or use linked email when available
- A download counts only when the file is on disk
In the Browser
- Open pages, click, type, scroll, download, and upload in Chrome or Edge
- Human-like mouse and typing; reads the live page
- Screenshots when needed. Credential screens are not sent to cloud models
- Type or paste a one-time code, or use linked email when available
- A download counts only when the file is on disk
On the Desktop
- Operate installed Windows apps
- Prefer the installed app when that is the direct path
- WhatsApp Desktop is the supported messaging app
Files & Documents
- Search, rename, move, and zip
- Create and edit Excel workbooks on the PC
- Create PowerPoint decks, Word documents, and text files on the PC
- PDF merge, split, rotate, watermark, form fill, and text extract
- Download proof on disk
- No delete unless you clearly ask and then confirm the exact files. Organizing does not delete
Email & Messaging
- Linked Gmail or Outlook: read, search, reply, and send with approval before send
- It cannot permanently delete mail
- WhatsApp Desktop: open a chat, attach a file, and send after approval
- Recent messages are not proof that the recipient received or opened a file
Mobile (Android Companion)
- Pair on your Wi-Fi, approve, and instruct the PC
- Optional companion, not a second full desktop operator
- Automatic notification codes are not a beta guarantee
Connectors & Integrations
- Built-in tools, plus MCP servers and REST recipes you choose
- Connector calls follow the same approval rules
- Changed tools wait for your review again
- Purchases need a mandate you set — merchant, amount cap, and expiry — plus approval
Real Execution
Real Tasks. Real Results.
Find a message or attachment, then reply or forward only after you approve.
Files and documents
Build an Excel workbook, a PowerPoint deck, or a Word file, or put a messy folder into named files. Organize does not delete.
Websites
Sign in on the site’s own pages, with your vault password and a code you can enter, then download or fill what you asked.
Desktop and phone
Use the installed app on Windows. Use the Android companion to approve or send a new instruction.
Portals
Walk a tax, government, or other portal you already use. You review before anything is submitted. BackBrain is not a tax adviser.
Research
Read the pages you point it at and write up what it actually saw. It should not wander off to extra sites.
Virtually limitless. Self-growing. Yours.
Work in your real browser, Windows apps, and files. Review the results and approve sensitive work. Success still depends on the app, site, login, and task.
Self-Learning
Teach It Once
BackBrain doesn't just learn from itself — it learns from you, in three ways. No scripting, no configuration screens. You talk to it, correct it, or show it.
Show It
Watch-and-learn
You can demonstrate. It should observe, summarize, and save only when you say save. It must not store what you typed into a secret field. A saved demonstration does not skip approval or promise automatic execution.
Tell It
Chat commands
In chat, say "remember: always use the PDF format on this portal" and it becomes a durable instruction, surfaced automatically every time BackBrain works on that site. Say "forget what you learned about that site" and it lists exactly what matches — and deletes only after you type a confirmation. Your memory, your rules.
Correct It Mid-Run
Live correction
You can interrupt a run and point it the right way. You can stop it, correct it, or take the mouse.
Self-Improving
It gets faster over time
Repeat work can reuse what worked. Live reasoning is still needed when the page changes.
Verified Success
BackBrain doesn't trust its own optimism. A step counts only when there's evidence: the page actually advanced, the file actually exists on disk. Only verified wins become memory.
Reuse memory
The next similar run can reuse steps whose results were real.
Read again
If the page has changed, it goes back to reading the live page.
Keep it local
Memory stays on your PC. Repeat work may still need reasoning calls.
Verified steps from a partial run may help the next try. History keeps a searchable transcript with secrets removed.
Your Sessions Stay Yours
An assistant that logs you out of everything after each task isn't saving you time. BackBrain treats your logged-in sessions as yours: it finishes the job and leaves your accounts signed in, so the next task starts where this one ended.
- It never signs you out of a site or app on its own — a built-in guard blocks stray logout clicks, even if the AI considers one.
- It logs out only when you explicitly ask it to.
- Secure portals can still time out on their own. Credential screens are not sent to a cloud model.
Connected to Everything
One agent on your PC
Windows is the product. Android is the optional companion. Mac, iPhone, and Linux are not available in this version.
MCP
You can add MCP servers you choose.
REST recipes
A small recipe can expose an API you already use. Review it before use.
Tool Pinning & Safety
If a connector changes its tools after you approved it, BackBrain refuses to use it until you re-approve. Tool descriptions are screened for prompt injection, tool outputs are scrubbed before they reach the model, and any purchase requires a pre-authorized spending mandate — merchant, maximum amount, and expiry.
Android Companion App
Your agent can take instructions from your phone
Pair once on your Wi-Fi. Approve a step or send a goal to the PC.
- One-time codes. Type or paste them on the PC, or use linked email when available. Automatic phone relay is not guaranteed.
- Mobile approvals. Approve or deny from the companion paired on your Wi-Fi.
- Optional companion. Not a second computer that does every desktop task.
- Remote instructions. Send a task from your phone; your desktop executes it.
- Private pairing. Phone and PC link over your own Wi-Fi with a QR code and device keys. No third-party cloud relay sits between your devices.
Architecture
Built to stay on your machine
Locally Installed
A real Windows application, not a website. Your sessions, files, learning memory, transcripts, and audit trail live on your machine — and you choose the AI brain: your own cloud key, or a fully local model with zero cloud egress.
Encrypted Vault
Credentials and tokens are encrypted on-device with Windows DPAPI and supplied just-in-time at the moment of use. Raw secrets — passwords, OTPs, PINs, tokens, card numbers — are never written to logs or transcripts. Credential screens are never sent to a cloud model.
Limited background work
Background work is limited. You can stop it. It is not an unbounded 24-hour operator.
Memory on the device
It remembers verified steps on the PC. A changed page goes back to live reasoning.
Suggestions you control
It can notice a saved instruction and suggest a task. You still approve sensitive steps.
Rules outside the model
Send, pay, buy, and submit need task-level approval. Delete needs a clear request and a separate confirm of the exact files. Organize never means delete.
Safety by Design
How control is split
Autonomy you can't trust is autonomy you'll never use. BackBrain's safety model isn't a settings page — it's built into the structure of the product, in a layer the AI itself cannot reach.
Three Tiers of Autonomy
Reading and navigation can be quiet when allowed. Send, pay, buy, and submit need your approval for the task; related later steps do not each ask again. Delete always needs its own confirmation of the exact files.
A Floor the AI Cannot Override
The model proposes the next step. A separate layer checks the kind of step. It cannot approve its own delete. You must clearly say delete, remove, or trash, then confirm the exact files.
A Tamper-Evident Record
The agent's actions are written to a hash-chained audit ledger — each record linked to the one before it, so after-the-fact edits are detectable. Combined with full run transcripts, you get a complete answer to "what exactly did it do?"
An Encrypted Vault
Credentials and tokens are encrypted on your device with Windows DPAPI and supplied just-in-time. Raw secrets — passwords, OTPs, PINs, tokens, card numbers — never appear in logs, transcripts, or exports. Prefer not to store a password at all? Session-only entry holds it in memory for one task and then clears it.
Redaction Before the Cloud
If you use a cloud AI model, BackBrain redacts sensitive data before anything is sent, and screens showing credentials are never transmitted. If you'd rather send nothing at all, local-only mode runs every AI decision on a local model — cloud egress blocked, with no silent fallback.
Defenses at the Edges
Connector tools are pinned — if a service changes its tools after you approved it, BackBrain refuses until you re-approve. Text arriving from websites and external tools is screened before it can influence the agent's reasoning. Purchases require a pre-authorized mandate: merchant, maximum amount, expiry. Background activity runs on strict budgets, with a kill-switch that stops everything instantly.
Model Flexibility
Your choice of model
BackBrain is the operator; you choose the intelligence that drives it. Nothing about the product locks you into one AI vendor — or into the cloud at all.
Bring Your Own Cloud Model
Plug in your own key for Azure OpenAI, OpenAI, Anthropic, Gemini, or Perplexity. Keys are encrypted on your device, and everything sent to the model passes through redaction first.
Or Run Fully Local
Point BackBrain at a local model (Ollama, LM Studio, or any compatible endpoint) and it reasons entirely on your hardware. In local-only mode, cloud egress is blocked outright — it will never silently fall back to a cloud provider.
Fallback Chains, Automatically
You can list another provider to try if one fails. If a cloud filter blocks a normal step, it can retry with less text. It does not bypass a site’s security check.
Survives Outages
It can retry, try another model you configured, or wait and let you take over. Repeat work may need fewer calls; it still may need live reasoning. Websites still need the internet.
The Autonomy Loop
How BackBrain Works
Tell It the Goal
Type it or say it, in plain language. BackBrain plans the route across browser, apps, files, email, and phone — and first checks its memory for a proven procedure from a past run.
It Executes, and Proves It
It reads the live screen, takes one action at a time, and verifies each step actually worked — the page advanced, the file exists on disk — before moving on. If it gets stuck, it re-plans, tries another method, or asks you; you can answer in chat or just take over the mouse while it watches and learns.
You Stay in Control
You can stop it, correct it, or take the mouse. History keeps the transcript. A send waits for approval; delete always needs a separate confirmation.
It reads the live page or app and decides the next step. Success still depends on the site, the login, and your approval.
Changelog
What you can expect in this beta
Windows operator, optional Android companion.
Full run History with searchable transcripts
Every run now keeps a complete, redacted transcript — search any past task and read exactly what was said and done.
Reads the live page
A redesign does not depend on one saved script. It can read the page again.
Learning from partial runs
A failed attempt can still teach the next try. Verified memory can help, but reasoning calls may still be needed.
Your accounts stay signed in
A new session guard means BackBrain never logs you out unless you explicitly ask — the next task starts where the last one ended.
Provider-outage resilience
AI provider down mid-task? BackBrain retries, fails over, keeps the run alive, and lets you take over while it watches and learns.
When a provider blocks a step
It can retry a normal step with less text. It does not bypass a site’s security check.
One-time codes
Type them, paste them, or use linked email. Phone relay is not guaranteed.
Forget a memory
You can tell it to forget a memory, and it should show you what it will remove.
Why BackBrain
Take back the busywork
Free during private beta. Windows, with an optional Android companion.
Get in Touch
Have a question?
Email hello@backbrain.in. There is no phone line and no office address on this site.
hello@backbrain.in