Four gestures, one source.

iOS-only, Wi-Fi LAN, never cloud.

The mobile app pairs with the Lemnia desktop or server over the local network. Audio runs through on-device Parakeet-TDT-0.6B-v3 INT8 ONNX; the model never leaves the phone. The text query travels over Wi-Fi LAN with gRPC mTLS. No cloud round-trip, no third-party voice service, no transcript stored outside the office.

iOS-only at v0.1.5. Wake-word disabled by default — the side button is the trigger. CarPlay UI not included; Bluetooth audio in the car works because the answer is read aloud, not displayed.

Question in the car, cited answer in two seconds.

Three minutes before the meeting, the owner asks over Bluetooth: "What's my history with Bianchi Srl?". Lemnia answers with TTS and shows the citations on screen — orders, tickets, last contact. No hands on the screen, no transcript leaving the company.

First response averages 2.1 s on the bench. Italian TTS runs on the phone; the answer text comes back from the desktop over LAN. The microphone is opened only on side-button press.

Customer at the desk: brief ready before the handshake.

When a customer walks up, the sales rep opens the brief from the phone. Three tiles — orders, payments, last contact — summarise the history in under three seconds. Every figure carries the source citation, ready to drill into if needed.

The brief is composed from the desktop dossier and streamed to the phone over LAN. It is read-only: the rep cannot edit a customer record from the brief. To change anything, the rep goes back to the source system the data came from.

A paper invoice, in one shot, into the ERP.

The owner photographs the supplier's invoice. OCR runs on the phone — invoice number, VAT ID, net, total, currency. The record travels over Wi-Fi LAN to the Lemnia desktop, which opens an entry in the ERP and links it to the right supplier card. No manual data entry, no cloud in between.

Average capture-to-ERP time on the bench: ≈ 6 seconds. OCR confidence shown on screen; the operator approves or corrects before the record commits.

At 19:00 the phone surfaces only what fell outside pattern.

One silent notification, once a day: anomalies detected in today's register — a reminder coming due, a stock under threshold, a supplier delay. Only if there are any. Each item is tappable and deep-links straight to the dossier that explains it.

Notifications-per-day budget: 1, conditional. No badges, no red dots, no engagement loop. The phone respects the user's evening.

Setup: 90 seconds, no cloud account.

• Step 1 — install

  Download Lemnia from the App Store (companion app, not the engine). 22 MB, no signup screen, no email collection.

• Step 2 — scan

  On the Lemnia desktop, open Settings → Pair Device. A QR code appears. The phone camera reads it. mTLS certificate exchanged over the LAN; pairing tied to the tenant key.

• Step 3 — name

  Give the device a name (Mario's iPhone, Magazzino, Auto). The name shows up in the audit log so every voice query is attributable.

• Step 4 — done

  From this point on, the device works on the LAN. No internet needed for queries. Mobile data plan unused unless you choose to enable cloud-burst (Pro mode).

What the mobile app will never do.

Always-on listening is disabled by default and gated by an explicit Settings toggle. Wake-word recognition runs only when the toggle is on, and only on-device. The microphone is never opened without a user gesture (side button or in-app tap).

There is no background analytics SDK. No third-party crash reporter. No advertising ID. The app does not request location, contacts, photo library or any permission the four documented scenarios don't require.