Privacy & trust
Your memories are yours. We'll never sell them or mine them.
Clear promises. No tricks. Proof you can check yourself.What we say here always matches what the Trust Centre promises.
IThree foundations
Private by default.
Every entry starts private. When you share, you pick exactly who sees it: a space, a person, someone who’ll inherit it one day. Never a feed. Not ever.Your memories will never train a machine.
We’ll never train on your private entries. Help runs when you ask. It works on the one piece of writing in front of you. It remembers nothing after.Preservation is the first feature.
If we ever have to close, you get a full copy of everything in plain, open files. Nothing is held hostage. Nothing is withheld. The Trust Centre keeps the preservation promise out in the open, and the plan for a protective trust with it, where you can hold us to both.'The Trust Centre is where the real promises live. Everything here follows it.'Confinity doctrine §2.4
IIAll claims, on one page
- What we encrypt, and what we can read
- See the table
- The full table sits in the Trust Centre. Some things are locked. Others, public memorial pages among them, we can read, because that is how a public page works at all.
- Zero training on your content
- Live
- We don't train models on your writing, your photos, your voice, or your family's archive. Ever.
- Nobody is buying your attention here
- Live
- There are no ads and no outside trackers. We don’t sell you, and we don’t sort you into groups for advertisers to buy. We use one privacy-friendly analytics tool, and you can turn it off.
- Request an export any time
- Queue live; delivery worker gated
- You can ask for an export now. How soon it lands depends on our setup. If a copy exists only on your own device for the moment, we say so plainly rather than let you assume otherwise.
- Confinity Trust CIC formation
- Planned · Target 2026-Q4
- We're setting up a protective legal structure. It isn't finished. Until it is, the published promise and the Trust Centre spell out what happens if Confinity is sold or has to close.
- Right to be forgotten
- Live
- Delete your own entries whenever you like. If someone else's memory mentions you, we can quietly remove your name from it.
- Private Mode — everything stays on your own device
- Q2 2027
- A setting you can turn on so all the thinking happens on your device, with nothing sent over the internet. Coming in 2027.
- Nothing is shared by default
- Live
- Every entry stays private until you invite someone into it. Remembrance pages are the one exception, and they are public on purpose.
- Open formats, no lock-in
- Live
- Your writing downloads as plain, open files. The Yearbook comes out as a PDF. Photos and videos keep their original formats, through the complete-archive export in the app, which is the path that carries the actual bytes. You can leave any time.
- Where your data lives
- Under re-verification
- We took this line down. It said your data sits in Europe if you're in Europe and in the US if you're in the US. Our own configuration doesn't support either half. The Trust Centre explains what we are re-checking and why we would rather leave the space empty.
- Warrant canary
- Published quarterly
- We publish a quarterly canary. If it stops appearing, something has changed.
- Transparency report
- First report at launch
- Every quarter we publish any requests from the authorities, what they concerned, and how we responded. Past reports stay up for good.
IIIReceipts you can download