How it works

One service instead of four

Steward is one thing to sign up to and one bill to pay. Behind it are four jobs we take off your hands: renting and patching a server, holding the AI account and its keys, keeping encrypted backups, and doing the updates and the monitoring.

You do not open an account with any AI company, and you never handle an API key or a password for the machine. You use the assistant, and we run everything under it, with one support address to email.

Your own server, set up for you

Every customer gets their own machine, not a slice of a shared one, and not shared with anyone else. We rent it from a hosting company on your behalf, in [SERVER REGION], hosted by [HOSTING PROVIDER]. It arrives with the assistant installed, password logins off, and nothing running that it does not need.

You use it through the assistant, not by logging into the machine. Fewer buttons, fewer ways to break a box at three in the morning.

Host, machine size and city are still to be settled before launch. [to be confirmed: host, size and region]

The KJ assistant on it

The KJ assistant is what you actually talk to. It is installed on your server, paired with your phone, and updated for you. You never install it, configure it, or hold a key for it.

Inside the service you can see your balance, your usage and your invoices, and restart the assistant or the server. Everything else comes to us.

The AI credit, and who holds the keys

Every request the assistant makes to an AI model is paid for from your prepaid credit. Prepaid credit starts at A$10. The talk rate, what that credit buys, is still being set and will be published on the rate card: [TALK RATE]. Automatic top-up adds A$10 when the balance drops below A$3, with a notice before every charge.

We hold the accounts with the AI providers, and the keys stay with us. They never go onto your server and are never shown to you. When the assistant asks a model to do something, the words of that request leave your server for the model provider's systems. That is how the assistant works, and the Privacy note says so plainly.

Your data stays on it

Everything you put into the assistant, and everything it makes for you, lives on your own server. We do not copy it into our console or billing records. The encrypted nightly backup, described below, is the only data we hold away from your server.

What we hold is the plumbing: the machine, the keys, the billing. Those two piles do not mix. See the Privacy note.

Encrypted backups

Your server is backed up nightly and encrypted, so it can be restored if something goes wrong.

By default we hold the backup key, which is what lets us bring your box back for you. If you would rather hold the key yourself, you can. Then the key is yours and not ours, and a lost key means nobody can restore the box, not even us. We will tell you which arrangement applies to you.

Updates and monitoring

We keep the machine patched and the assistant up to date, in waves rather than all at once, so a problem shows up on a few boxes before it reaches everyone.

Every server reports disk, memory and whether the assistant is running. That is how we spot a box in trouble, and how we can tell you when yours genuinely needs more room. We watch the machine; we do not read your work.

Planned maintenance is told to you in advance where we can, usually while you are asleep. A hurried restart (a security fix, say) is told straight away rather than afterwards. The notice period is still to be set: [MAINTENANCE NOTICE DAYS].

The machine is ours; what you own is your data.

What we can see

The two-column answer, what we can see next to what we do not look at, is on the Trust page along with access, restores and deletion.