Privacy & trust

Your memories are yours. We'll never sell them or mine them.

Clear promises. No tricks. Proof you can check yourself.

What we say here always matches what the Trust Centre promises.

Open Trust Centre

Sample export

Confinity Studio

Audited

TodayPeopleSpacesYearbook

ReceiptsTrust posture

No feed

Zero trainingprovider commitments recorded

Export pathJSON + files · no lock-in

Data trustformation tracked in public

IThree foundations

Private by default.

Every entry starts private. When you share, you pick exactly who sees it: a space, a person, someone who’ll inherit it one day. Never a feed. Not ever.

Your memories will never train a machine.

We’ll never train on your private entries. Help runs when you ask. It works on the one piece of writing in front of you. It remembers nothing after.

Preservation is the first feature.

If we ever have to close, you get a full copy of everything in plain, open files. Nothing is held hostage. Nothing is withheld. The Trust Centre keeps the preservation promise out in the open, and the plan for a protective trust with it, where you can hold us to both.

'The Trust Centre is where the real promises live. Everything here follows it.'Confinity doctrine §2.4

IIAll claims, on one page

What we encrypt, and what we can read: See the table; The full table sits in the Trust Centre. Some things are locked. Others, public memorial pages among them, we can read, because that is how a public page works at all.
Zero training on your content: Live; We don't train models on your writing, your photos, your voice, or your family's archive. Ever.
Nobody is buying your attention here: Live; There are no ads and no outside trackers. We don’t sell you, and we don’t sort you into groups for advertisers to buy. We use one privacy-friendly analytics tool, and you can turn it off.
Request an export any time: Queue live; delivery worker gated; You can ask for an export now. How soon it lands depends on our setup. If a copy exists only on your own device for the moment, we say so plainly rather than let you assume otherwise.
Confinity Trust CIC formation: Planned · Target 2026-Q4; We're setting up a protective legal structure. It isn't finished. Until it is, the published promise and the Trust Centre spell out what happens if Confinity is sold or has to close.
Right to be forgotten: Live; Delete your own entries whenever you like. If someone else's memory mentions you, we can quietly remove your name from it.
Private Mode — everything stays on your own device: Q2 2027; A setting you can turn on so all the thinking happens on your device, with nothing sent over the internet. Coming in 2027.
Nothing is shared by default: Live; Every entry stays private until you invite someone into it. Remembrance pages are the one exception, and they are public on purpose.
Open formats, no lock-in: Live; Your writing downloads as plain, open files. The Yearbook comes out as a PDF. Photos and videos keep their original formats, through the complete-archive export in the app, which is the path that carries the actual bytes. You can leave any time.
Where your data lives: Under re-verification; We took this line down. It said your data sits in Europe if you're in Europe and in the US if you're in the US. Our own configuration doesn't support either half. The Trust Centre explains what we are re-checking and why we would rather leave the space empty.
Warrant canary: Published quarterly; We publish a quarterly canary. If it stops appearing, something has changed.
Transparency report: First report at launch; Every quarter we publish any requests from the authorities, what they concerned, and how we responded. Past reports stay up for good.

IIIReceipts you can download

Every claim above has a receipt.

If we can’t keep this honest, we shouldn’t be here. Every link below opens the real proof. The document, or the page itself.

Receipt

Sample export ZIP shape

Ask for a full copy of your archive whenever you want one. Your writing comes out as plain files. The complete-archive export in the app brings the photos and videos out too, in the files you put in.

Open the /api/exports

Receipt

Subprocessor changelog

Every vendor that touches your data. A date on every change.

Open the page

Receipt

Encryption posture table

What's locked. What we can see in order to run the service. What's still to come.

Open the page

Receipt

Refusal cards we ship

How the helper knows when to say no, and why it says it gently.

Open the Model safety

Receipt

Wind-down plan

What happens to your archive if Confinity ever has to close. And the plan to protect it long-term.

Open the page

Receipt

Warrant canary

We post this every three months. If it ever disappears, take it as a quiet warning. That is the point of it.

Open the page

Looking for the binding documents?

The Trust Centre holds the plain table of what's encrypted and what isn't. It holds the vendor list, the warrant canary and the transparency report too.

Open the Trust Centre

Model safety

Data deletion

Ask a human

Preparing the pageOne moment. Fetching quietly.