Privacy & trust

Your memories are yours. We will never sell them or mine them.

Clear promises, no tricks, and proof you can check for yourself.

What we say here always matches what the Trust Centre promises.

Open Trust Centre

Sample export

Confinity Studio

Audited

TodayPeopleSpacesYearbook

ReceiptsTrust posture

No feed

Zero trainingprovider commitments recorded

Export pathJSON + files · no lock-in

Data trustformation tracked in public

IThree foundations

Private by default.

Every entry starts private. When you do share, you choose exactly who sees it — a space, a person, someone who will inherit it one day. Never a feed.

Your memories will never train a machine.

We will never train on your private entries. Help only runs when you ask for it, works on that one piece of writing, and remembers nothing afterwards.

Preservation is the first feature.

If we ever have to close, you get a full copy of everything in plain, open files — never held hostage. The Trust Centre keeps our preservation promise, and our plan for a protective trust, in the open.

'The Trust Centre is where the real promises live. Everything here follows it.'— Confinity doctrine §2.4

IIAll claims, on one page

What we encrypt, and what we can read: See the table; The full, honest table is in the Trust Centre. Some things are locked so only you can read them; others (like public memorial pages) we can read, because that's how they work.
Zero training on your content: Live; We don't train models on your writing, your photos, your voice, or your family's archive. Ever.
No ads, no tracking pixels: Live; No outside trackers and no ads. We never sell you, and we never sort you into groups for advertisers. We use one privacy-friendly analytics tool, and you can turn it off.
Request an export any time: Queue live; delivery worker gated; You can ask for an export now. When one is ready to be delivered depends on our setup, and we'll always tell you plainly if a copy is only stored on your own device for now.
Confinity Trust CIC formation: Planned · Target 2026-Q4; We're setting up a protective legal structure as part of our preservation promise. Until it's finished, our published promise and the Trust Centre spell out exactly what happens if Confinity is ever sold or has to close.
Right to be forgotten: Live; Delete your own entries whenever you like. If someone else's memory mentions you, we can quietly remove your name from it.
Private Mode — everything stays on your own device: Q2 2027; A setting you can turn on so all the thinking happens on your device, with nothing sent over the internet. Coming in 2027.
Nothing is shared by default: Live; Every entry stays private until you choose to invite someone. Remembrance pages are the one exception — those are public on purpose.
Open formats, no lock-in: Live; Your writing downloads as plain, open files. Your photos and videos come out in their original formats, and your Yearbook as a PDF. You can leave any time.
Where your data lives: Live; Your data is stored in Europe if you're in Europe, and in the US if you're in the US. The Trust Centre lists exactly where, including the backup locations.
Warrant canary: Published quarterly; We publish a quarterly canary. If it stops appearing, something has changed.
Transparency report: First report at launch; Every six months we publish any requests from the authorities, what they concerned, and how we responded. Past reports stay up for good.

IIIReceipts you can download

Every claim above has a receipt.

If we can't keep this honest, we shouldn't be here. Every link below opens the real proof — the document or the page itself.

Receipt

Sample export ZIP shape

Ask for a full copy of your archive any time — your writing, and your photos and videos in their original files.

Open the /api/exports

Receipt

Subprocessor changelog

Every vendor that touches your data, with a date for every change.

Open the page

Receipt

Encryption posture table

What is locked so only you can read it, what we can see in order to run the service, and what is still to come.

Open the page

Receipt

Refusal cards we ship

How our helper knows when to say no, and why — gently, and to protect your privacy.

Open the Model safety

Receipt

Wind-down plan

What happens to your archive if Confinity ever has to close, and our plan to protect it for the long term.

Open the page

Receipt

Warrant canary

We post this every three months. If it ever disappears, take it as a quiet warning.

Open the page

Looking for the binding documents?

The Trust Centre holds the plain-English table of what's encrypted, the list of companies we work with, the warrant canary, and our transparency report.

Open the Trust Centre

Model safety

Data deletion

Ask a human

Preparing the pageOne moment - fetching quietly.