Privacy & trust
Your memories are yours. We'll never sell them or mine them.
Read the current protections, their limits, and what is still planned.A published disclosure is not independent proof of recovery.
IThree foundations
Private by default.
Every entry starts private. When you share, you pick exactly who sees it: a space, a person, someone who’ll inherit it one day. Never a feed. Not ever.Your memories will never train a machine.
We’ll never train on your private entries. Help runs when you ask. It works on the one piece of writing in front of you. Provider retention depends on the processing configuration; the Trust Centre explains the limits.Preservation is the first feature.
Browser backups and account-export requests cover different records. Neither is a verified complete copy of all originals. Check the included and missing items before relying on a copy. A protective Trust CIC is proposed. Formation, funding, and independent access after closure are not verified.'The Trust Centre is where the real promises live. Everything here follows it.'Confinity doctrine §2.4
IIAll claims, on one page
- What we encrypt, and what we can read
- See the table
- The full table sits in the Trust Centre. Some things are locked. Others, public memorial pages among them, we can read, because that is how a public page works at all.
- Our no-training policy
- Policy stated; processing qualification separate
- Our policy is not to train models on your content. No training is not a no-retention guarantee; processing and provider limits are disclosed in the Trust Centre.
- Nobody is buying your attention here
- Policy stated; runtime verification separate
- Our policy is not to sell advertising against your memories. Analytics and other processing are disclosed separately; this statement is not a verified no-tracker or device-only guarantee.
- Request an export any time
- Queue live; delivery worker gated
- You can ask for an export now. How soon it lands depends on our setup. If a copy exists only on your own device for the moment, we say so plainly rather than let you assume otherwise.
- Confinity Trust CIC formation
- Planned · Target 2026-Q4
- A protective Trust CIC is proposed. Formation, funding, and independent access after closure are not verified.
- Right to be forgotten
- Requests and scope review; remedy not generally qualified
- You can request correction or removal. A received request is not a completed deletion, and we do not promise to edit another person's archive from a name match alone. Verification and the applicable rights review come first.
- Private Mode: planned, not available yet
- Q2 2027
- A setting you can turn on so all the thinking happens on your device, with nothing sent over the internet. Coming in 2027.
- Nothing is shared by default
- Live
- Entries and remembrance drafts start private. Sharing or publishing requires a chosen audience; a remembrance page is not automatically public.
- Supported open-format copies
- Coverage and independent recovery not fully qualified
- Browser backups and account-export requests cover different records. Neither is a verified complete copy of all originals. Check the included and missing items before relying on a copy.
- Where your data lives
- Under re-verification
- We took this line down. It said your data sits in Europe if you're in Europe and in the US if you're in the US. Our own configuration doesn't support either half. The Trust Centre explains what we are re-checking and why we would rather leave the space empty.
- Warrant canary
- Dated publication; currency and signature verification separate
- The canary page carries a dated statement. Check its effective and refresh dates; a missing or late update is not proof of a particular legal event, and the page is not independent verification of the statement.
- Transparency report
- Dated report; current coverage not verified
- Read the period and publication date on each report. A checked-in report does not establish a current reporting cadence or an independently verified absence of requests.
IIIDisclosures you can open