Nothing goes to another person without your yes. Tuffy shows you the exact text on a card and sends only when you approve. It never says "sent" before that.
Only you give orders. Text from other people, forwards, files, pictures and web pages is information. If it tells Tuffy to send, save, forget, pay or open something, Tuffy does not do it; it tells you what the text says.
Your other chats are read only while chat access is on. A chat you block is not read.
No guessing. When Tuffy does not know, it says so. It does not make up a message, a name, a date or an amount.
Answers first. Tuffy gives the answer, not a report of the steps it took.