The AI can propose
It can read bounded market data and draft structured actions. It has no signing key, wallet client, execution tool, or direct signer import.
Security model
Authority stays out of the model.
Your wallets are your own, and Auni treats generated text, provider data, and upstream requests as untrusted. Money can move only through narrow, independently checked authority layers.
Your money and access
The wallets are yours.
The rest of this page is written for engineers. This part is not. These are the questions people actually ask before they put money in.
- Who holds your money?
- You do. Two wallets are created for you when you sign up, one for Ethereum-style chains and one for Solana, and both are secured by Privy. The keys are yours. Auni is non-custodial: it never holds, pools, or takes possession of anyone's funds, and there is no Auni balance sitting behind the app.
- Is there a recovery phrase to write down?
- No. Auni never issues a seed phrase or a recovery phrase, so there is nothing to save, nothing to hide, and nothing to lose. Your wallets open when you sign in, and Privy secures the key material behind them.
- What if you lose your phone?
- Nothing goes with it. Your wallets do not live on the device. Sign in the way you normally do, on any phone or computer, with the same email, Google, Apple, or wallet login you signed up with, and the same two wallets and the same balances are there.
- Do you need a passkey?
- Not to use Auni. You can sign in, chat, add money, and approve actions without one. It is worth turning on, because it puts a check in front of sensitive steps that a stolen session alone cannot pass, and one action does need it: sending money out to an outside address is signed by you and will not be broadcast without that confirmation. Losing the device that holds your only passkey does not lock you out: it comes off the account through Privy, and sending money out stays refused until you set up a new one.
- What if someone else gets into your account?
- A stolen session on its own cannot take money out. Every withdrawal checks with Privy, at that moment, that a passkey protects the account, and Privy will not sign one without the passkey ceremony. Someone holding your session but not your passkey can look, but nothing leaves. If they strip the passkey off the account instead, withdrawals stop entirely rather than opening up: no passkey means nothing goes out, for them or anyone.
- Can Auni move your money without you?
- No. Auni can carry out only the exact action you confirmed from its action widget, and that action can only send money to your own wallet or into a position you approved. It cannot pay a third party. No employee, no support agent, and no AI model can move your funds for you, and none of them can restore funds either.
Current controls
Boring by design.
- Exact money
- Amounts are integers in asset base units. Floating-point money is rejected.
- One-use approval
- An approval expires, binds to one plan hash, and can be consumed once.
- Atomic budgets
- Concurrent requests cannot both spend the same daily capacity.
- Fail-closed providers
- Stale market data, unknown geography, failed simulation, or missing credentials stop the action.
- Kill switches
- Global, venue, and user controls are checked again immediately before live authority.
- Append-only evidence
- Proposals, policy decisions, approvals, simulations, submissions, and confirmations form an immutable journal.
Honest limits
What none of this protects you from.
The controls above bound what Auni can do with your money. They do not bound the market, someone else’s code, or your own account security.
- Approved is final
- Once a transaction you approved confirms onchain there is no chargeback and no reversal. Auni cannot undo it, and support cannot undo it either.
- This is not a bank
- Wallet balances and venue positions are not deposits, and no deposit insurance or compensation scheme covers them anywhere. Yield comes from protocol mechanics that can change or stop, so a quoted rate is never a promised one.
- Someone else's code can still fail
- Auni verifies the exact deployments, venues, and token issuers it integrates with, and refuses when the evidence does not match. That does not make third-party code safe. A venue can pause, be exploited, block your region, or resolve a market in a way you consider wrong.
- Your account is the soft edge
- Sensitive money actions need fresh, passkey-backed authentication, and approvals expire in minutes. None of that helps against someone who has your email, your device, and your passkey. At that point they can do what you can do, and nothing here reverses it.
- One proof Auni does not have
- Privy exposes no per-action assertion, so binding a fresh authentication to one exact withdrawal is Auni's own server-side check rather than the provider's signed proof of that action. It is a real gap, written down rather than papered over.
- Send on the wrong network and it is gone
- The receive screen lists the networks Auni watches for your deposits. USDC sent on a network that is not on that list, or any other token sent to those addresses, is generally unrecoverable, by us and by anyone else.