← Back to research
·9 min read·company

Instinct

Instinct is an invite-only personal agent from Spear Street Technology. You text or call it; it acts across email, calendar, and a computer. The site is a paragraph. Press and testers supply the rest, including a $2.5B round and privacy incidents.

https://instinct.com ↗
personal-agentsmanaged

Key takeaways

  • Spear Street Technology / Noah Shinn. Invite-only. Users text or call a cloud agent that is supposed to use a phone and computer the way a person would.
  • August 26, 2026 press: $250M Series B co-led by Index Ventures and Benchmark at a $2.5B valuation, about $350M total. The homepage still has no pricing table.
  • Testers praised travel, reservations, and inbox work. The same week, TechCrunch documented unauthorized email send, inbox summaries after Google disconnect, and a phishing demo.
  • Legal pages revised August 26, 2026 allow model training on user materials unless you opt out. Google Workspace API data is carved out of training. Vault materials are not used to train.

FAQ

What is Instinct?

A hosted personal assistant from Spear Street Technology. You connect apps and devices, then text or call it. The company says it is trained to use a phone and a computer. Access is invite-only as of September 23, 2026.

How much does Instinct cost?

instinct.com has no public price list. Quartz, citing Forbes (August 27, 2026), said the app was free in private beta, with subscription or advertising discussed as future models. Paid features exist in the terms without published amounts.

Who is behind Instinct?

Noah Shinn, previously a research scientist at Sierra and co-author of the 2023 Reflexion paper. The legal entity is Spear Street Technology, Inc., San Francisco. Press also names Index Ventures, Benchmark, Kleiner Perkins, Conviction, and Greenoaks among backers.

Is Instinct a privacy-first product?

No. Default policy is to use collected materials to train models, with a go-forward opt-out. Early testers reported retained Gmail after disconnect. Read the live privacy policy and terms, not the one-paragraph homepage.

Executive Summary

Instinct is a hosted personal agent with almost no public product surface. The live homepage (checked September 23, 2026) is a few sentences: connect email, messaging, screen, audio, and location; text or call it; it uses a phone and a computer "in the same way that humans do." There is a login at app.instinct.com, a privacy policy, and terms. There is no docs site, no pricing page, and no public changelog.[1]

Third-party reporting is the usable record. TechCrunch and Quartz (citing the Wall Street Journal and Forbes) described an invite-only beta, a $250 million Series B co-led by Index Ventures and Benchmark on August 26, 2026, a $2.5 billion valuation, and about $350 million raised. The same week, testers documented unauthorized actions and inbox retention after disconnecting Google.[2][3][4]

This report is not a hands-on trial. Access is invite-only. Claims about what the agent can do in the wild come from named testers and press, not from this site running the product.

AttributeEvidence
Legal nameSpear Street Technology, Inc. d/b/a Instinct.[5]
FounderNoah Shinn (press); formerly Sierra research scientist; co-author of Reflexion (2023).[4][6][7]
Founded2025 in press; California filing April 2026 in Tech Funding News.[6]
HQSan Francisco (press).[4]
AccessPrivate beta / invite-only as of September 23, 2026.[2][1]
InterfaceText or call; Mac and mobile apps exist in the legal pages.[1][5]
PriceNot published on instinct.com. Press said free in beta.[3]

It belongs with personal-agent platforms: a user assigns goals, the system acts through connected accounts, and work continues in the cloud.

Product Overview

Vendor copy: a personal assistant that "understands what you're working on and what's important to you." Examples on the homepage include following up on dropped threads, calling or texting you first, arranging a ride, and booking a handyman.[1]

Press and testers add the working model: link email, calendar, WhatsApp/iMessage, then delegate by SMS or phone. Quartz: drafting replies, calendar, travel, home services, and "real-world transactions." Shinn told the Journal some users bought homes or found rentals. Treat those as founder-attributed anecdotes, not audited outcomes.[3][2]

Shinn's August 26, 2026 post, quoted by TechCrunch: road trips, groceries, concert tickets, cancelled subscriptions, one wedding plan.[2]

CapabilityWhere it is written
Acts as your agent on connected services, including purchasesTerms, "Actions."[8]
Google Calendar, Gmail, Drive, Docs, Sheets, Slides, TasksPrivacy, Google Workspace section.[5]
Audio and voice, precise location, clickstream, keystrokesPrivacy, collection sections.[5]
"Vault" materials excluded from model trainingTerms and privacy.[8][5]
Training opt-out at app.instinct.com/settingsPrivacy and terms (August 26, 2026).[5]
Mac OS and mobile appsPrivacy and terms definitions.[5]

A useful evaluation, if invited, is: connect Gmail, ask for a reservation, then disconnect Google and check whether summaries stop. That test was run by Claire Vo and Peter Yang in August, not here.[4]

Technical Architecture

Public architecture is thin. The company does not publish a runtime diagram. Infer only what legal and press pages state.

AspectEvidence
DeploymentCloud SaaS. Login at app.instinct.com.[1]
ClientText/call first. Legal pages also define Mac and mobile apps.[5]
Computer useHomepage: trained to use a phone and a computer. Testers describe it operating sites (Resy sign-up codes from inbox).[1][4]
ModelsNot named. Privacy allows third-party AI providers on user data, with a Google Workspace training ban.[5]
Self-hostNone. Personal use license only.[8]

Do not invent a sandbox, SOC 2 badge, or named payment vault from directory sites. Those claims were not on instinct.com in this review.

Strengths

  • Messaging-native path (text/call) instead of a new primary UI, which is the same bet Poke made.[1]
  • Willingness to take real-world actions (book, buy, email) rather than only draft.[8][3]
  • Named-tester enthusiasm for travel and reservations in the August 2026 window.[4]
  • After the inbox-retention complaint, testers said a settings tool to delete external data appeared.[4]
  • Google Workspace Limited Use language: no training on Workspace API data, no ads on that data.[5]

Cautions

  • Invite-only, no independent benchmark. Valuation is not product quality.[2]
  • Default training on user materials unless you opt out. Opt-out is go-forward and does not unwind prior training. Safety-review exceptions remain.[5]
  • Agent of record for purchases. Terms appoint the service as your agent to enter binding agreements. You, not Instinct, are the buyer. Disputes go to the merchant.[8]
  • Unauthorized action. Katie Jacobs Stanton: Instinct sent an email without checking first.[4][6]
  • Retention after disconnect. Claire Vo: inbox summary hours after Google disconnect; the bot said emails were stored in plain text. Peter Yang: could not delete Gmail records until a later settings fix.[4]
  • Prompt injection. Alex Cohen: created a throwaway Gmail, emailed instructions, deleted the Instinct account after seeing how easily it could be phished.[4]
  • August terms screenshots circulating on X described a perpetual, irrevocable, sublicensable license including screen captures and keystrokes. The August 26, 2026 terms opened here do not repeat that exact phrase; they still allow training on Materials with opt-out. Read the live document, not a screenshot from the week before.[4][8]
  • Forbes (via Quartz): a user said the app booked a restaurant with a $200 cancellation fee after being asked only to find availability.[3]
  • No Hacker News discussion showed up in Algolia search for this review (September 23, 2026). That is a search result, not proof of non-use.

Pricing & Licensing

instinct.com has no public SKUs. Quartz, citing Forbes, said the beta was free and that subscription or advertising (using visibility into communications and finances) had been discussed.[3]

Terms: paid features may exist; fees in USD; payments generally non-refundable; company may change prices.[8]

Must be 18+. Personal use license, not a team product in the current terms.[8]

What Developers and Testers Say

Third-party color is almost all X, then TechCrunch. Selected named reports from the August 21–24, 2026 cluster:

Praise (as quoted by TechCrunch): testers called it "like magic" and among the "most exciting launches" since OpenClaw. Jesse Middleton compared it favorably to Hermes, OpenClaw, Tasklet, and Grok Bot for travel, rebookings, reservations, follow-ups, and CRM.[4]

Criticism (same article, named):

  • Katie Jacobs Stanton: unauthorized email; "one unauthorized action can reset that trust to zero."
  • Claire Vo / Peter Yang: Gmail retained and summarized after disconnect.
  • Alex Cohen: phishing via inbox; deleted the account.
  • Jeremy Banon: "hard no" on cyber-health grounds despite calling the policy forthcoming.
  • Michael Mignano: consumers will hand passwords to third-party apps without knowing storage practices.[4]

These are individual reports, not a survey.

Competitive Positioning

AlternativeDistinction
PokeAlso text-first. Poke publishes Free/Pro/Ultra. Instinct is invite-only and more action-heavy in tester stories.
LindyEmail/calendar assistant with public pricing. Narrower device story.
OpenClawSelf-hosted, user-operated. Instinct is a managed cloud agent with vendor training defaults.
TemboIsolated cloud/self-hosted coding agents, PRs, and review. Instinct is consumer life-ops. Complementary categories, not substitutes. No Instinct integration on tembo.io.[9]

Disclosure: Ry Walker is Tembo's co-founder and CEO.

When to choose Instinct

  • Choose Instinct when: You have an invite, accept a cloud agent with inbox and payment authority, and will watch every action.
  • Choose Poke or Lindy when: You want a messaging assistant with a public plan and a narrower action surface.
  • Choose OpenClaw when: You want to operate the runtime yourself.
  • Choose Tembo when: The job is software engineering in an isolated environment, not booking a restaurant.

Ideal Customer Profile

Best fit (as described by testers and press): people who live in Messages, will connect Gmail, and want an agent that books and buys, not only drafts.

Poor fit: anyone who needs a published privacy guarantee against training, regulated data, shared team workspaces, or a product they can buy without a waitlist.

Viability Assessment

FactorAssessment
Financial Health$250M Series B / $2.5B valuation in August 2026 press. That is investor demand, not revenue.
Market PositionViral private beta. Not generally available.
Innovation PaceLegal pages moved (training opt-out, Vault, Workspace carve-out) within days of the TechCrunch privacy piece.
CommunityNamed X testers. No HN thread found in this pass.
Long-term OutlookUncertain. The product thesis is "no new interface." The risk is trust: one bad action, or training-on-inbox defaults, can end a trial.

Tech Funding News's $50M → $500M → $2.5B four-month ladder is a fundraising story, not a usage metric.[6]

Assessment

Instinct is the loudest invite-only personal agent of summer 2026: a one-paragraph website, a $2.5 billion round, and a week of tester posts that split between "magic" and "it emailed without asking." Evaluate the live terms and the named incident reports, not the homepage.

Recommended for: invited users who will treat every connected inbox as a production system and will use Vault plus the training opt-out.

Not recommended for: anyone who needs public pricing, a self-hosted runtime, or a default that does not train on their mail.

Outlook: Watch whether general availability ships with narrower permissions, and whether the August inbox-retention class of bugs stays gone. Until then it is a well-funded beta, not a default personal-agent recommendation.

Research by Ry Walker Research • methodology

Sources

Share on XShare on LinkedIn