Instinct AI review: the personal agent you text, and the fine print

Alicia Kirana Utomo
Written by

Alicia Kirana Utomo

Katelin Teen
Reviewed by

Katelin Teen

Last edited September 28, 2026

Expert Verified
Illustrated hero banner for an Instinct AI review, showing a person texting a personal AI agent that books a flight, orders groceries and places a phone call

What Instinct actually is

Instinct is a personal assistant built by Spear Street Technology, Inc., which trades as Instinct, per its privacy policy. The founder is Noah Shinn, and the pitch fits in one line from Instinct's homepage: "there are no new interfaces." You text or call it. It is "trained to use a phone and a computer" the same way people do.

That homepage is, in fact, almost the entire public website. A few sentences, one button, done:

Instinct's homepage, a short block of text describing the personal assistant with a single "Text Instinct to get started" button, as captured from instinct.com

Instinct says it connects to "email, messaging, screen, audio, location, and more," and its core model is tuned for the small stuff of daily life: following up on threads you dropped, calling or texting you proactively, arranging a ride to the airport, booking a handyman. When Shinn announced it in August, he said early users had planned cross-country road trips, bought groceries and concert tickets, and cancelled hundreds of dollars of subscriptions. It is still an invite-only beta "while we're actively bringing up more compute."

It sits in the same new wave as Meta Muse, Grok Bot, and the open-source OpenClaw: agents that do the task rather than describe it.

If you are new to the category, this explainer on AI personal assistants covers the ground.

How it works under the hood

This is the part I find most interesting as someone who builds agents. Instinct's trick is not one clever model. It is a pipeline that keeps the interface boring and puts the complexity in the back.

Hand-drawn flow of how Instinct completes an errand: you text or call, the agent uses its own computer connected to your email, calendar, screen and location, pulls logins from the Vault, pays with a one-time Link card, and texts you when done
Hand-drawn flow of how Instinct completes an errand: you text or call, the agent uses its own computer connected to your email, calendar, screen and location, pulls logins from the Vault, pays with a one-time Link card, and texts you when done

Here is what each step does, from Instinct's own docs and the founder's posts:

  • The chat is the whole interface. You message it in iMessage or WhatsApp. There is also a Mac app and a web workspace at app.instinct.com, where you manage connections and settings.
  • It acts through your accounts. The terms of service authorize Instinct to "access, copy, collect, and index data" from connected services and take actions on them. Link Google Workspace and it gets Gmail, Calendar, Drive, Docs, Sheets, Slides, and Tasks.
  • Logins go in a Vault. Instinct can sign into third-party accounts for you. The terms say anything you add to the Vault is used only to serve you and never used to train AI models.
  • Payments go through Stripe Link. Since late August, when Instinct wants to buy something it requests a one-time-use card from Link, authorized for that amount, so the merchant never sees your real card. You "explicitly review and approve the amount Instinct can spend."
  • Instincts talk to other Instincts. A trusted-person network lets your agent coordinate with the agents of people you approve. Shinn says Instincts had coordinated over 300k times in the first week, and now swap files encrypted end to end.

The newest piece landed on September 28: a Shopify partnership. Shinn says 35% of users use Instinct for personal shopping, and it can now search Shopify's merchant network and set up a Shop Pay checkout. That puts Instinct right in the middle of agentic commerce, next to ChatGPT shopping.

What users actually say

The reaction on X splits cleanly. People who use it love how proactive it is. People who read the terms get nervous.

On the love side, the recurring word is "proactive." Most AI tools wait for a prompt. Instinct starts the conversation:

"Instinct is the first AI product I've used that is truly proactively helpful. It's already checking me into flights, reminding me about reservations I forgot to cancel, etc"

Even its sharpest critic on the business side rates the product itself highly. Andrew Wilkinson called it "an exceptional product, and the most proactive personal assistant agent I've used," before arguing the company is a "feature not a product" that OpenAI or Anthropic could copy. Nathan Baschez had a sharper theory of why it feels magic: it is willing to take more risk and "let the agent access and do more without step-by-step permissions," the same way Claude Code permissions got skipped in the early days.

That risk shows up in the small complaints. One reply under Saleh's post: "It tried to change my seat while checking me in once. Didn't like that." A heavy user who runs "doc appts, amzn orders, food delivery, movies" through it said the single thread gets hard to follow:

"while it can maintain context in one thread, i can't lol. my chat has a bunch of diff, unrelated stuff, and it's hard for me to quickly figure out the 'status' of each thing"

And with Meta Muse now out, some early fans are drifting. On a September 27 episode of the Get the Check podcast, one host said they were switching and complained that Instinct had "gotten significantly worse at cart checkouts," with a staged cart that "went to zero."

The fine print is the real review

This is where most Instinct coverage stops being useful. I read the full terms and privacy policy, both last revised August 26, 2026. Instinct is upfront about the risks, to its credit. But the balance of who carries them is worth seeing side by side.

Hand-drawn two-column ledger. What you grant Instinct: index your connected accounts, act as your agent, enter agreements for you, train on your data with an opt-out. What stays on you: unintended actions, deleting indexed data, checking every action, purchase disputes
Hand-drawn two-column ledger. What you grant Instinct: index your connected accounts, act as your agent, enter agreements for you, train on your data with an opt-out. What stays on you: unintended actions, deleting indexed data, checking every action, purchase disputes

The clauses that matter most:

TopicWhat the terms or privacy policy say
Acting for youYou "appoint the Services as your agent to enter into agreements, commitments or transactions on your behalf," and those are "binding on you as if entered into directly by you."
MistakesInstinct is "not responsible for any unintended Actions," actions "may not always be reversible," and "records of Actions available through the Services may not always be accurate."
PurchasesYou, not Instinct, are the buyer. Disputes are between you and the merchant.
DisconnectingDisconnecting an account does not delete what was indexed. You have to request deletion at app.instinct.com/workspace.
Model trainingOn by default. Opt out at app.instinct.com/settings, but flagged safety-review data can still be used, and past training is not undone. Google Workspace and Vault data are excluded.
What it collectsConnected content, audio if enabled, precise location if shared, and clickstream including keystrokes.
DisputesBinding individual arbitration and a class action waiver, with a 30-day window to opt out by emailing support.
Age18 or older.

None of this is unusual for an agent that does real things, and the privacy policy even warns about "interactions with third parties who may include misleading instructions intended to influence autonomous agents," which is a plain-English description of prompt injection. It just means you, not Instinct, carry the risk of a wrong action.

Brad Groux, who works with AI agents, read the same documents and came to a clear line:

"I'd want to connect an inbox with read-only access, then approve specific permissions as needed. Sending emails, sharing files, making purchases, or accepting terms should require my approval through a control the agent can't bypass."

In fairness, the payments piece already works much like that: Link's one-time card needs your approval on the amount. Email, files, and terms-acceptance are where that kind of hard gate is not described in the terms.

Instinct also had its first public scare on September 23, when a user posted that the agent seemed to describe someone else's financial document. Shinn responded the same day that it "was caused by a hallucination (the model fabricated a proper noun)," that "this was not a data breach," and that the team had built a hallucination detection layer in 48 hours. That is a fast, transparent response. It is also a reminder that AI hallucinations look scary to users even when no data moved.

Pricing: there isn't a public one

Instinct publishes no plans and no prices. The terms say you "may be required to pay us fees to access or use certain features," that the company "may, at any time, revise or change the pricing," and that "all payments are non-refundable." Until it leaves invite-only beta, you are using it on whatever terms Instinct sets later.

For comparison, Meta Muse is free up to a weekly token allowance with paid plans above it, and Grok Bot has no free tier at all. The personal-agent market has not settled on a price model yet, so plan for Instinct's to change.

Should you connect your accounts?

Here is how I would decide, account by account. Pick what you are thinking of connecting:

Quick check

What would you hand to Instinct?

Reasonable, with eyes open. This is what Instinct is built for, and it is where the proactive follow-ups shine. Opt out of model training in settings on day one, and remember that disconnecting later does not delete what it indexed: request deletion in your workspace.
Use Link, not a raw card. The Stripe Link flow gives Instinct a one-time card for an amount you approve, and your real card number never reaches the merchant. You are still the buyer of record, so disputes go to the store, not Instinct.
I would hold off. The terms let Instinct enter agreements on your behalf and put unintended actions on you. Other people's messages in a work inbox did not agree to be indexed, and there is no published control that forces approval before an email goes out.
Wrong tool for the job. Instinct acts on one person's accounts. A support queue needs an agent that works from your approved knowledge, escalates when it is unsure, and can be tested on past tickets before it replies to a customer. That is a helpdesk teammate, not a personal agent.

Where a personal agent stops and a work teammate starts

Instinct's whole design points one way: one generalist agent for one person's life. That is the right shape for errands, because personal life is a hundred small, unrelated tasks, and the charm is that it just figures each one out.

Hand-drawn 2x2 positioning map with personal life to work job on one axis and any task to one defined role on the other. Instinct sits in the personal, any-task corner with Meta Muse and Grok Bot nearby, while the eesel AI teammate for helpdesk and blog writing sits in the work, defined-role corner
Hand-drawn 2x2 positioning map with personal life to work job on one axis and any task to one defined role on the other. Instinct sits in the personal, any-task corner with Meta Muse and Grok Bot nearby, while the eesel AI teammate for helpdesk and blog writing sits in the work, defined-role corner

Work is the opposite. A work job is one thing done to a standard, over and over, where a confident wrong answer lands on a customer. That is the 7,000-ticket CX lead's point from the top: you do not want an agent improvising, you want one that knows its lane and leaves the rest alone. It is also why generalist tools like Manus, ChatGPT agents, and Claude Cowork keep landing as personal productivity tools rather than as owners of a business process.

That is how I think about eesel. It is an AI teammate platform where you hire ready-to-work teammates for a defined job: the AI helpdesk teammate and the AI blog writer. Each one arrives with the skills, integrations, and company context for its role, rather than a blank generalist you have to point at everything.

Try eesel

If Instinct got you thinking about agents that act instead of chat, the place that pays off at work is the support queue. eesel's AI helpdesk teammate joins the helpdesk you already use, learns from your knowledge base and past tickets, and answers only from knowledge you approved. Everything else it hands back to your team.

eesel's reports dashboard for a helpdesk teammate, showing task volume over 30 days, trigger events by type, and approval and rejection usage per tool
eesel's reports dashboard for a helpdesk teammate, showing task volume over 30 days, trigger events by type, and approval and rejection usage per tool

The part Instinct's terms leave to you, eesel builds in. You can simulate the teammate on hundreds of your past tickets and read its resolution rate before a customer sees a single reply, and the reports show every tool action that was approved or rejected. Pricing is public too: a free plan with 100 credits, then fixed monthly plans from $299 for 500 credits, where one ticket or chat is one credit, on the pricing page.

Keep Instinct for your errands. For your customer support, try eesel free and test it against your own ticket history first.

My verdict

Instinct is the most proactive consumer agent I have looked at, and the plain text-thread interface is a smart bet: anyone can use it in 30 seconds. The Link one-time cards, the Vault, and the Shopify checkout show a team moving fast on the right problems, and the founder's public response to the September hallucination scare was quick and clear.

What holds me back is that the terms ask you to carry almost all of the risk of a wrong action, training is opt-out rather than opt-in, and there is still no price. If you are comfortable with that, get an invite, connect your personal calendar and email, opt out of training, and use Link for anything you buy. Let it earn the next account.

Just keep it on your side of the line between life and work. For a job that touches customers, hire something built for the job.

Frequently Asked Questions

What is Instinct AI?
Instinct is a personal AI agent from Spear Street Technology in San Francisco, founded by Noah Shinn. You text it on iMessage or WhatsApp, or call it, and it does errands on its own computer: booking travel, ordering groceries, checking you into flights, and following up on threads you dropped. It sits in the same new category as other AI personal assistants that act instead of just chatting.
Is Instinct AI free?
Instinct is invite-only and has no public price list. Its terms say you may be required to pay fees for certain features, that pricing can change at any time, and that payments are non-refundable. Rivals publish more: Meta Muse is free up to a weekly token allowance (see this Meta Muse pricing breakdown), while Grok Bot pricing starts on paid plans.
Is Instinct AI safe to use?
It is safer than it was at launch: purchases can run through one-time Link cards with an amount you approve, and logins can sit in its Vault. But the terms let it act as your agent and enter agreements for you, put unintended actions on you, and keep indexed data after you disconnect unless you delete it. Read this guide to agent data privacy for the questions worth asking first.
Does Instinct AI train on my data?
By default, yes. You can opt out at app.instinct.com/settings, but the privacy policy keeps an exception for data flagged for safety review, and opting out does not undo past training. Data from Google Workspace and anything you put in the Vault are excluded from model training.
How does Instinct AI compare to Meta Muse and Grok Bot?
All three are consumer agents that act on your accounts. Instinct wins on proactivity and the plain text-thread interface. Meta Muse publishes the most detailed security design and a free tier, and Grok Bot leans on a shared cloud computer. The best AI agents roundup covers the wider field.
How do I get an Instinct AI invite?
Instinct is in an invite-only beta while the company brings up more compute. Existing users and investors hand out invite links, and there is a waitlist at app.instinct.com. You must be 18 or older to use it.
Can Instinct AI handle customer support for my business?
No. Instinct is a personal agent for your own accounts, not a tool that joins a helpdesk queue with a knowledge base and escalation rules. For support you want an AI helpdesk teammate that you train on your knowledge and test on past tickets before it replies to a customer.

Share this article

Alicia Kirana Utomo

Article by

Alicia Kirana Utomo

Kira is a writer at eesel AI with a Computer Science background and over a year of hands-on experience evaluating AI-powered customer service tools. She focuses on breaking down how helpdesk platforms and AI agents actually work so that support teams can make better buying decisions.

Related Posts

All posts →
Illustrated hero banner for a Meta Muse review, showing a personal AI agent working inside a secure cloud VM on travel and shopping while its owner relaxes
Trending

Meta Muse review: is Meta's personal AI agent worth your accounts?

A hands-on Meta Muse review: what Meta's new personal AI agent actually does, the Secure VM and Sentinel security model, the $20 and $100 pricing, and the catch.

Alicia Kirana UtomoAlicia Kirana UtomoSep 9, 2026
Hand-drawn illustration of a person on a sofa texting a personal AI agent that completes tasks on a laptop, a calendar and a document
Trending

Instinct AI: what it is, how to get in, and how to set it up safely

Instinct AI is the personal agent you text or call to run errands. Here is what it does, how sign-up works, and the seven settings to change before you connect anything.

Kurnia Kharisma Agung SamiadjieKurnia Kharisma Agung SamiadjieSep 29, 2026
MAI-Transcribe-2 review: Microsoft's speech-to-text model turning audio into a transcript
Trending

MAI-Transcribe-2 review: is Microsoft's new speech-to-text model worth it?

A hands-on review of MAI-Transcribe-2, Microsoft's new speech-to-text model: the benchmark claims, the real price, how to access it, and where it actually fits.

Rama Adi NugrahaRama Adi NugrahaSep 9, 2026
Shadow, the AI interface for Mac, review cover illustration
Trending

Shadow review (2026): the AI interface for Mac

My hands-on Shadow review: the bot-free AI interface for Mac that transcribes meetings on-device, runs custom Skills from a shortcut, and costs $8 a month.

Alicia Kirana UtomoAlicia Kirana UtomoJul 8, 2026
Banner image for the Suno v6 review
Trending

Suno v6 review: I tested the new AI music models

A hands-on Suno v6 review: how v6, v6-wild, and v6-mini actually sound, the licensed-data pivot with Warner and BMG, what early testers say, pricing, and whether it beats v5.5.

Alicia Kirana UtomoAlicia Kirana UtomoSep 11, 2026
GPT-6 Sol review illustration with a magnifying glass over a benchmark scorecard
Trending

GPT-6 Sol review: is OpenAI's cheap workhorse worth it?

A hands-on GPT-6 Sol review: GPT-5.6-level intelligence at half the price, a real factuality win, a fast Codex daily driver, and where it still trails Astra and Opus 5.5.

Alicia Kirana UtomoAlicia Kirana UtomoSep 23, 2026
Tasklet on one side and Manus on the other, split by a green VS divider, in a head-to-head between two credit-based AI agents.
Trending

Tasklet vs Manus: which AI agent actually does the work? (2026)

Tasklet runs always-on automations across your stack; Manus builds a whole artefact from one prompt. Both bill by the credit. Here is how the two AI agents actually differ in 2026.

Kurnia Kharisma Agung SamiadjieKurnia Kharisma Agung SamiadjieSep 23, 2026
Grok Bot and OpenClaw compared, a hosted AI agent and a self-hosted one side by side
Trending

Grok Bot vs OpenClaw: which AI agent should you actually run?

A hands-on comparison of Grok Bot and OpenClaw: how each AI agent works, what they really cost, the security trade-offs of a hosted bot versus a self-hosted one, and where neither one fits.

Rama Adi NugrahaRama Adi NugrahaSep 23, 2026
Grok Bot signing into your apps on one side and Zapier Agents built across a 9,000-app workflow grid on the other, split down the middle.
Trending

Grok Bot vs Zapier Agents: which AI agent does the work? (2026)

Grok Bot signs into your apps and drives them; Zapier Agents build on the biggest app-connector graph and bill by the activity. Here is how the two AI agents actually differ in 2026.

Rama Adi NugrahaRama Adi NugrahaSep 23, 2026

Ready to hire your AI teammate?

Set up in minutes. No credit card required.

Get started free