Privacy & trust
Your memories are yours. We'll never sell them or mine them.
Read the current protections, their limits, and what is still planned.A published disclosure is not independent proof of recovery.
IThree foundations
Private by default.
Every entry starts private. When you share, you pick exactly who sees it: a space, a person, someone who’ll inherit it one day. Never a feed. Not ever.Your memories will never train a machine.
We’ll never train on your private entries. Help runs when you ask. It works on the one piece of writing in front of you. Provider retention depends on the processing configuration; the Trust Centre explains the limits.Preservation is the first feature.
Browser backups and account-export requests cover different records. Neither is a verified complete copy of all originals. Check the included and missing items before relying on a copy. A protective Trust CIC is proposed. Formation, funding, and independent access after closure are not verified.'The Trust Centre is where the real promises live. Everything here follows it.'Confinity doctrine §2.4
IIAll claims, on one page
- What we encrypt, and what we can read
- See the table
- The full table sits in the Trust Centre. Some things are locked. Others, public memorial pages among them, we can read, because that is how a public page works at all.
- Zero training on your content
- Live
- Our policy is not to train models on your content. No training is not a no-retention guarantee; processing and provider limits are disclosed in the Trust Centre.
- Nobody is buying your attention here
- Live
- There are no ads and no outside trackers. We don’t sell you, and we don’t sort you into groups for advertisers to buy. We use one privacy-friendly analytics tool, and you can turn it off.
- Request an export any time
- Queue live; delivery worker gated
- You can ask for an export now. How soon it lands depends on our setup. If a copy exists only on your own device for the moment, we say so plainly rather than let you assume otherwise.
- Confinity Trust CIC formation
- Planned · Target 2026-Q4
- A protective Trust CIC is proposed. Formation, funding, and independent access after closure are not verified.
- Right to be forgotten
- Live
- Delete your own entries whenever you like. If someone else's memory mentions you, we can quietly remove your name from it.
- Private Mode: planned, not available yet
- Q2 2027
- A setting you can turn on so all the thinking happens on your device, with nothing sent over the internet. Coming in 2027.
- Nothing is shared by default
- Live
- Entries and remembrance drafts start private. Sharing or publishing requires a chosen audience; a remembrance page is not automatically public.
- Supported open-format copies
- Coverage and independent recovery not fully qualified
- Browser backups and account-export requests cover different records. Neither is a verified complete copy of all originals. Check the included and missing items before relying on a copy.
- Where your data lives
- Under re-verification
- We took this line down. It said your data sits in Europe if you're in Europe and in the US if you're in the US. Our own configuration doesn't support either half. The Trust Centre explains what we are re-checking and why we would rather leave the space empty.
- Warrant canary
- Published quarterly
- We publish a quarterly canary. If it stops appearing, something has changed.
- Transparency report
- First report at launch
- Every quarter we publish any requests from the authorities, what they concerned, and how we responded. Past reports stay up for good.
IIIDisclosures you can open