What Is Instinct AI? The Viral Personal Assistant, Explained

§ 01What Instinct actually does

Instinct’s own description is compact: “a personal assistant that understands what you’re working on and what’s important to you.” The interface pitch is that there is no interface. In the company’s words: “there are no new interfaces. It’s trained to use a phone and a computer. You can text or call it.”

Under that simplicity sits very deep access. Instinct connects to your applications and devices: email, messaging, screen, audio, location, and more. Its model is trained to operate a phone and computer the way a human does, which means it can act inside services that have no API at all. The site’s own examples include following up on threads you have dropped, proactively calling or texting you, arranging a ride to the airport, and booking a handyman.

Early users pushed it much further. Reports collected by TechCrunch and posted directly by testers describe Instinct booking and rebooking flights, making restaurant reservations (including retrieving a signup code from email to complete a Resy booking), buying groceries and concert tickets, cancelling hundreds of dollars of subscriptions, managing investor follow-ups, and in one case helping plan a wedding.

The common thread, and the reason the stories spread: these anecdotes end with a completed real-world task, not with instructions for the user to go do it themselves.

§ 02Who is behind it, and the $2.5B week

Instinct is operated by Spear Street Technology, Inc., a San Francisco company led by Noah Shinn, a 23-year-old former research scientist at Sierra, the AI customer-service company founded by Bret Taylor and Clay Bavor. Shinn introduced himself publicly for the first time on August 26, 2026: “I’m Noah, the founder of Instinct. Instinct is a personal agent that we’ve been building for the past few months.”

The same day, the company told the Wall Street Journal it had raised a $250 million Series B at a $2.5 billion valuation, co-led by Index Ventures and Benchmark, bringing total funding to $350 million, per TechCrunch. TechCrunch had earlier reported Kleiner Perkins and Conviction as investors in prior rounds. For a product still in private beta, with a one-page website, that is one of the fastest valuation runs the agent category has seen.

§ 03Why it went viral twice in one week

The first wave, roughly August 17 to 23, was capability: founders and investors posting completed-task stories. One investor described it as outperforming Hermes, OpenClaw, Tasklet, and Grok Bot for travel, reservations, email, and CRM work. The invite-only scarcity did the rest.

The second wave was the backlash, and it is the more instructive one, because every incident traces back to the same design property: an agent with standing read/write access to your accounts.

• Claire Vo disconnected Instinct from Google at 11 AM and got a summary of her email at 2 PM. The bot confirmed her emails were stored in plain text for later searches.
• Peter Yang found Instinct would not delete his indexed Gmail records when asked. The team later added a deletion tool in settings.
• Alex Cohen ran a prompt-injection test: he emailed his own account from a fresh address with instructions for Instinct, found it could be phished, and deleted his account.
• Katie Jacobs Stanton reported Instinct sent an email on her behalf without checking first. Her summary of the whole trade is the sharpest one written so far: “The more powerful these agents become, the more trust matters. Every successful action earns a little more trust. One unauthorized action can reset that trust to zero.”

None of these were external breaches. They were demonstrations of what standing access plus autonomous action means when the guardrails are still being built in public.

§ 04What Instinct’s terms actually say

Instinct revised its Terms of Service on August 26, 2026, after screenshots of the earlier version circulated widely (TechCrunch’s August 24 coverage quotes the earlier terms granting a broad “perpetual and irrevocable” license over user materials). We read the current version directly. Three clauses matter most:

Disconnecting is not deleting. Verbatim: “even if you disconnect a Connected Service, we may still use the indexed Connected Service Input data unless you follow the instructions to request deletion.” Deletion is a separate request, made from the workspace settings.

The agent can bind you. The terms appoint the service “as your agent to enter into agreements, commitments or transactions on your behalf,” and any such agreements “shall be binding on you as if entered into directly by you.” For purchases, you are the buyer, the connected service’s cancellation and refund policies apply, and disputes are between you and that provider.

Safeguards carry no warranty. The terms state the company may implement confirmation requirements or other controls on actions, but “we make no representation or warranty that such safeguards will prevent unintended or erroneous Actions.” Responsibility for the consequences, financial and contractual, sits with you.

On training: by default your materials can be used to train models, with a go-forward opt-out in settings, and a Vault feature whose contents are excluded from training. To the company’s credit, all of this is stated plainly rather than buried.

§ 05Instinct vs an AI employee

Instinct and AI employees sit on the same tectonic shift: AI that acts instead of AI that answers. But they are different products for different halves of your life, and the delegated-authority design is where the difference shows.

Instinct works for you, the person: your inbox, your dinner reservations, your subscriptions. Its authority model is broad by design, because life admin is unstructured, and the August incidents show the cost of getting that model right in public.

An AI employee works for your business, in a role. That structure changes what safe delegation looks like. A CellCog employee has its own email address and its own workspace rather than standing inside yours, and you control which credentials and tools each employee can use. Every command that reaches your world is classified by the agent, and the platform rejects any command that arrives unclassified; actions above the level you set wait for your approval. The unconfirmed-email incident that reset Katie Stanton’s trust is, in a role-based system, a permission you simply have not granted yet.

§ 06Should you join the waitlist?

Honestly: if the life-admin problem is real for you, yes. Instinct is the most credible consumer personal agent to appear since OpenClaw, the early-user reports are impressive, and the company moved quickly on the loudest complaints (the deletion tool, the revised terms). The waitlist costs you nothing but patience; there is also a fast-growing set of alternatives you can use today while you wait.

Go in with your eyes open about the trade. Before connecting your primary email, read the terms yourself, know that disconnect and delete are separate acts, decide what belongs in the Vault, and set the training opt-out if that matters to you. The category Instinct is dragging into the mainstream, agents with real authority over real accounts, is going to define consumer security norms for the next decade. It is worth understanding the terms of that trade before you make it, whether with Instinct or anyone else.