Confidant updates itself when a new version is available. Two parts of the app can update: the app itself, and the AI model.

Once an hour while you're online (and once on every launch), Confidant checks if a new version is available. If so:

When the app starts, Confidant also checks if the AI note model has a newer version available. Model updates are bigger (about 3.5 GB for Standard, 5 GB for Pro) and use a different flow:

This screen blocks app use for the duration of the download — the new model and the old model can't both be live at once. If you'd rather wait, you can quit and finish the update later (it'll re-prompt on next launch).

Both app updates and model updates are signature-verified before installing. We sign every release with a private key, and Confidant verifies the signature with the matching public key built into the app. If verification fails, the install is aborted and the existing version is preserved.

This protects against:

You don't see any of this — it's just a guarantee that what installs is what we shipped.

Update checks require an internet connection. If you're offline, the check quietly fails and retries on the next hourly cycle or the next launch. The app continues to work, just at the version you're on.

There's no "never update" toggle on purpose — updates often include security fixes and clinical-quality improvements that we strongly want all users on. You stay in control of when an update installs: don't click Install when the banner appears. The banner stays available; the new version only installs when you choose to.

App updates ship every 1–4 weeks during active development. Model updates ship rarely — once or twice a year — and are flagged in our release notes when they happen.