Binding policy. Plain language where we can. No surprises buried in footnotes.Last updated: 2026-08-17
We publish changes here before they take effect.
This Privacy Policy explains how Confinity (“we”, “us”) collects, uses, and protects information when you use our website and services at confinity.com and related applications.
What we collect
Three kinds of thing. Information you give us directly, which is your account details and everything you choose to keep: entries, photos, voice notes, the people and dates you record, and the memorial pages you make. Technical data needed to run the service, meaning device and log records, request identifiers, and error reports. And anything you send to support, which we keep for as long as it takes to answer you and a reasonable while after.
Where your archive lives
In two places, and the difference matters.A copy is held in the storage of each browser you have used Confinity in. That copy belongs to the device. It is why the archive opens instantly and keeps working offline, and it is also why signing out of a shared computer is not the same as removing your data from it. The privacy dashboard has a separate control that clears the copy on the browser you are using; it does not reach the others.The synced copy is held on our servers so that your devices agree with each other and so that the people you invite into a space can see what you shared with them.
How we use information
To provide and improve the service, keep accounts secure, respond to you, and meet our legal obligations. Confinity is not built to monetize attention. We do not sell your memories as advertising inventory, we do not sell personal information, and we do not use anything you have written to train an AI model.
Sharing
We share information only with service providers who help us operate the product under strict agreements, when you explicitly invite someone into a space, or when the law requires it. The full register of those providers, including what each one receives and where it processes it, is published at /trust/centre/subprocessors and is the authoritative list.Two of them are worth naming here, because they process the content of your memories rather than metadata about them:
Google Cloud (Vertex AI) runs the Composer assist, and only when you ask for it on a specific piece of writing. It runs in Confinity's own Google Cloud project on the EU multi-region endpoint, under terms that forbid training on the inputs.
Deepgram transcribes voice notes in the United States, and only as a fallback for when transcription cannot be done on your device. Voice-sample retention is contractually zero.
International transfers
Most of our providers are hosted in the EU or the UK by preference. Where personal data does leave, the lawful mechanism is the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Agreement or the UK Addendum. We complete a transfer impact assessment before any new cross-border flow. The detail, including which clause module applies to which provider, is at /legal/scc-dta.
Your choices
Two rights are self-service in Settings → Privacy. You can request an export, which we build and deliver as a signed download link to the address on your account; the link is good for seven days. You can delete your account, which gives you a seven-day window to change your mind and then removes what we hold, with backups ageing out inside thirty days.For correction, for an access request in another form, or for anything you cannot do from the dashboard, write to privacy@confinity.com. The full deletion policy, including what we are legally required to keep and what happens to memorial pages, is at /legal/data-deletion-policy.Region-specific rights are set out separately: California, Brazil, and children's privacy.