Instinct TasksUnofficial guide

By category

Guide

Instinct AI review: privacy, safety and track record

This Instinct AI review is an independent summary. The site has no connection to Instinct, and we haven't run Instinct through a hands-on test ourselves; access is invite-only. Instead we read the two documents Instinct publishes, its privacy policy and its terms, gathered what users reported in the weeks since early access opened, and put the company's response next to each problem where one exists. The result is a picture of what you agree to, what has gone wrong, and how to limit the damage if something does. Everything here was checked against the linked sources as of 16 October 2026.

Checked against the official pages listed at the end, 2026-10-16. Instinct Tasks is an independent guide, not Instinct.

Instinct AI review: the verdict in brief

Instinct publishes very little. Its homepage is a single Text Instinct button; there is no pricing page, no security page and no status page. What it does publish puts the risk on you: the terms say beta features are used "at your sole risk", that Instinct is "not responsible for any unintended Actions", and the liability clause starts at "THE GREATER OF ONE HUNDRED DOLLARS ($100.00)". Model training on your data is on by default.

Users report it getting real money back and handling bookings well. The one serious public incident, a user seeing details from what looked like someone else's financial document, Instinct says was a hallucination rather than a breach, and the public evidence can't settle it. Our read: Instinct is reasonable for errands you can check afterwards, with sensitive accounts kept out until it has earned trust. For what it is, see What is Instinct AI?.

What users report it doing well

These are posts on X that we haven't reproduced. We picked ones that say what was asked and what happened, and kept the failures in.

  • Refunds: @brettdash_ says Instinct claimed $2,177 back from British Airways after a cancelled flight and hotel booking. @DaveLeeATX says it spent 26 minutes talking to AT&T's own bot and got an $86 refund. See Lower your internet bill.
  • Hard bookings: @mariosundar says it secured the last two IMAX 70mm seats for The Odyssey at AMC Metreon in San Francisco, a job covered in Get seats for a sold-out screening.
  • Small catches: @JoParisot says it noticed a calendar invite had no location and flagged that his wife would need it.
  • Where it stalled: @startupideaspod says a restaurant booking stopped because the restaurant wanted a card on file. @Graham_Tonkin says Safelite's site booted it. @kuap says it couldn't fill a refund form that needed two photos in a one-attachment field, so they stepped in.

Instinct AI privacy: what it can access and what it trains on

The privacy policy, last revised 26 August 2026, is the main source here. Read alongside the terms, it says this:

  • With Google linked, "we receive access to your Google Calendar, Gmail, Google Drive, Google Docs, Google Sheets, Google Slides and Google Tasks".
  • Training is on unless you opt out: "If you do not want us to use your information to train AI models, you can opt out". The setting is at app.instinct.com/settings. The opt-out "applies on a go-forward basis", and content flagged for safety review may still be used for training even after you opt out.
  • Data from Google Workspace APIs is excluded: "We do not use information received from Google Workspace APIs to evaluate, fine-tune, train, or improve AI models".
  • Vault contents are excluded too. The terms say Instinct will use Vault materials only to provide the service and "will not use such Materials to train AI models." We found no published description of how Vault stores or encrypts credentials.
  • Disconnecting isn't deleting: "disconnecting a third-party integration does not automatically delete data collected from that integration". The policy states no retention period. It also says Instinct does not sell your information or pass it to registered data brokers.

Incidents and how Instinct responded

The financial document (Instinct disputes it). On 21 September @prit4k posted that Instinct "described a financial document with details that weren't mine, then claimed someone else's photo had crossed into my chat." @DavidPawlan relayed it the next day, framing it as either a leak or a hallucination. On 23 September Instinct's Noah Shinn replied on X: "This instance was caused by a hallucination (the model fabricated a proper noun)" and "This was not a data breach, no user data was shared, and no user isolation boundary was violated." Runtimewire noted that he gave no evidence for how the company knew. Either explanation is a problem for you as a user, though a fabricated document is a much smaller one than a leaked one.

A one-time code used without asking (secondary report only). @ByteFoxAI posted on 24 September that "Instinct canceled 2 RSVPs using a one-time code from a user's Gmail—without asking", linking a Business Insider story we couldn't read. We found no company response. Other users describe the same ability as a feature: @mizanxali says Instinct read a card verification code from email to finish paying for movie tickets. If it can read your Gmail, it can read the codes that arrive there.

Outages. Instinct has no public status page we could find, and its terms say "Your access and use of the Services may be interrupted from time to time." We found no official acknowledgment of any specific outage.

Cost, access and limits

Instinct publishes no price. Its terms say "You may be required to pay us fees to access or use certain features of our Services" and that "all payments are non-refundable", except where the law says otherwise. Access is invite-only, through a waitlist; our Instinct AI pricing guide and app guide cover the details. One user, @dovginsburg, reported hitting "1,200 hosted browser minutes per day"; Instinct has not documented any such limit.

Who should use Instinct, and who should wait

It suits people with a backlog of checkable errands: refunds, bill disputes, bookings, inbox cleanup. You text it, it works, and you confirm the result in the other service. Hold off if you'd need it inside a work Google account with client data, if you can't absorb a non-refundable charge or an unintended action under a liability cap that can be as low as USD 100, or if you want a published security model before handing over logins. Instinct hasn't published one.

How to use Instinct AI more safely

  • Opt out of training at app.instinct.com/settings before you connect accounts, since the opt-out only applies going forward.
  • Link Google only if a task needs it. One connection covers Gmail, Calendar, Drive, Docs, Sheets, Slides and Tasks.
  • Tell it in plain words to ask before using any one-time code or login link from your email, and to stop before paying, sending or cancelling. Our how-to guide has wording that puts the approval point in the request.
  • Put logins in Vault rather than in chat. The terms exclude Vault from training, though Instinct hasn't said how Vault is secured.
  • When you stop using a connection, disconnect it and also ask for deletion; disconnecting alone doesn't delete the data. Submit a data access request shows the process.
  • Check the result outside the chat: the booking in the venue's account, the refund on your statement, the email in your sent folder.

Tasks to build trust with first

  • Find forgotten subscriptions Money · A list of recurring subscriptions, upcoming renewals and charges to review.
  • Lower your internet bill Money · A lower quoted rate on the same service, or a number and a script for you to finish the call, with any offer checked by you before it is accepted.
  • Process and reply to an email inbox Work · An inbox worked through, with messages replied to or flagged, and the recipients and wording of any reply shown to you before sending, especially for reply-all.
  • Organize a group dinner and chase RSVPs Food · A booked venue on terms you approved, one clear details message to guests, and an attendance list kept up to date.
  • Submit a data access request Privacy · A completed request form, sent through the company's own channel after you approve it, with a dated record of what was sent.

By category: Creative (1), Family (8), Food (9), Health (4), Home (22), Learning (1), Money (17), Privacy (5), Shopping (28), Travel (32), Work (19).

Questions about Instinct AI safety

Is Instinct AI safe?

Safe enough for errands you can check afterwards, in our view, with care. Training on your data is on by default, disconnecting an account doesn't delete what it collected, and the terms say Instinct isn't responsible for unintended actions. Its one serious public incident, a user seeing another person's financial details, the company says was a hallucination, not a breach. Opt out of training, link only the accounts a task needs, and tell it where to stop.

Is Instinct AI legit?

Yes, it's a real product with published terms and a privacy policy, in invite-only early access. What it lacks is public detail: no prices, no status page and no description of how it secures stored logins.

Did Instinct leak another user's data?

A user reported seeing details from a financial document that wasn't theirs. Instinct's Noah Shinn said it was a hallucination and that no user data was shared. He didn't publish evidence, and nothing public settles it either way.

Does Instinct train AI on my data?

Yes, unless you opt out at app.instinct.com/settings. The opt-out only covers data from then on, and safety-flagged content may still be used. Instinct says it doesn't train on data from Google Workspace APIs or on Vault contents.

How much does Instinct AI cost?

Instinct hasn't published a price. Its terms say some features may require fees, and payments are non-refundable except where the law requires otherwise.

Sources