These are irreplaceable. Here is how they are handled.
Precisely how, including the parts still in progress and the one protection we do not offer. If a claim is not on this page, we are not making it.
A new legacy, second one
Private
Visible to you and nobody else
- StoredPrivate bucket, encrypted at rest
- Played backThrough links that expire
- Used for trainingNo
- ExportableIn full, at any time
End-to-end encrypted? Not today — and the section below explains why.
How your recordings are handled
How your media is stored
Private storage, and links that stop working
Recordings, photos, and documents are held in private storage and are never publicly readable. Uploads are encrypted at rest with server-side encryption, and all traffic is encrypted in transit.
- Never publicly readable — no guessable public URL
- Encrypted at rest, and in transit
- Playback links expire, so a shared link does not stay live forever
How AI is used
Your stories are not baked into a model
Your memories are used to answer your family’s questions and nothing else. We instruct our AI provider not to retain or train on your content, and every answer is generated from your own memories at the moment it is asked.
- Used to answer your family’s questions, and nothing else
- Our provider is instructed not to retain or train on your content
- Nothing is pre-baked — each answer is built when it is asked
Your data is yours
Two doors out, both the same size
Export everything — transcripts, themes, timeline, and media — at any time. Or delete everything, including the stored files, and it is gone. Removing someone’s access takes effect immediately, not at the end of a billing period.
- Full export whenever you ask for it
- Complete deletion, stored media included
- Access removal takes effect immediately
What we do not claim
There is no end-to-end encryption today.
Memories have to be readable by our servers to be transcribed and searched. That is the trade this product is built on: a recording nobody can read is also a recording nobody can ask a question of. We would rather write that down here than let “encrypted storage” imply something it does not mean.
Everything on this page above the line is implemented. If a protection is not described here, assume we have not built it.
And before any of that matters: it is private
Every legacy is created private and becomes visible to anyone else only when you widen it yourself, one step at a time.
Only you
Where it starts
Your family
People you add
People you invite
One at a time
Everyone
Only if you say so
Nothing widens on its own, and nothing widens by default.
Read it, then decide.
You can start with one memory, keep it to yourself indefinitely, and take the whole thing away with you if you change your mind.
The formal versions live in our privacy policy and terms.