Security & privacy

These are irreplaceable family records. Here is precisely how they are handled — including the parts still in progress.

Private by default

Every legacy is created private. It becomes visible to anyone else only when you explicitly widen it, one step at a time: only you, then family you invite, then specific invited people, then public.

How your media is stored

  • Recordings, photos, and documents are held in private storage — never publicly readable
  • Uploads are encrypted at rest with server-side encryption
  • Playback uses links that expire, so a shared link does not stay live forever
  • All traffic is encrypted in transit

How AI is used

Your memories are used to answer your family’s questions and nothing else. We instruct our AI provider not to retain or train on your content. Every answer is generated from your own memories at the moment it is asked — your stories are not baked into a model.

Your data is yours

  • Export everything — transcripts, themes, timeline, and media — at any time
  • Delete everything, including stored files, and it is gone
  • Removing someone’s access takes effect immediately

What we do not claim

We do not offer end-to-end encryption today: memories must be readable by our servers to be transcribed and searched. We are honest about that rather than implying otherwise.