Privacy
You are building your own understanding, not surrendering your life to a platform. That sentence is the whole policy; the rest is detail.
What we hold
Only the material you choose to bring, and what the medium derives from it for you. You can see what's connected, exclude a source, a folder, a date range, or a person, and remove any of it cleanly.
What is yours alone
Your material is used only to build your own understanding. It is not sold, not used to train shared models, not shown to other people, and not mined for advertising. Provenance is preserved end to end.
Who processes it
We rely on a small set of providers, each scoped to a single job:
- Authentication — verifies your sign-in. It holds your identity, not your material.
- A language model — composes the Voice's replies. It is not given your identity, and it does not retain your material.
- Hosting — your data lives in a database we operate on dedicated infrastructure, with encrypted off-box backups on separate hardware; the web experience is served by our hosting provider.
Consent is staged
Nothing connects without your asking. Each source explains, before access, what is read and what value it brings. The medium earns the right to more by proving itself with less.
Deletion is real
When you remove a layer, it is removed — including what was derived from it. Export anytime; leave anytime, with your material.
Security
Encrypted in transit (TLS); backups are encrypted (AES-256), and access is scoped to you. Material involving other people is withheld by default — surfaced only to you, never to them. Sensitive families — relationships, health — are handled with additional care and are never required.