Trust & Safety
Data Security
Your memories and messages deserve the highest level of protection. Here is how we keep them safe.
How We Protect Your Data
End-to-End Encryption
All data transferred between your device and our servers is protected with TLS (Transport Layer Security) encryption. Your passwords are hashed using industry-standard bcrypt — we can never see or recover them.
Secure Cloud Storage
All media files — photos, videos, audio, documents — are stored on AWS S3 with strict private access policies. Files are never publicly accessible; they are served only through time-limited signed URLs generated specifically for you.
Access Control
Every API request is authenticated using JSON Web Tokens (JWT). Your data can only be accessed by you when you are logged in. Legacy contacts and message recipients only receive access when the delivery conditions you set are met.
Delivery Safeguards
Final messages are not sent automatically upon inactivity. Your designated legacy contacts must first confirm the delivery before anything is shared. This double-confirmation prevents accidental or premature delivery.
Minimal Data Collection
We collect only what is necessary to run the platform. We do not sell your data, share it with advertisers, or use it for any purpose beyond providing the service. See our Privacy Policy for full details.
Your Right to Delete
You are always in control. You can delete individual messages, memory capsules, journals, or your entire account at any time. Upon account deletion, all associated data and media files are permanently removed from our servers.
Our Security Practices
- ✓Regular security audits and code reviews
- ✓Strict role-based access for internal team members
- ✓No third-party advertising trackers on the platform
- ✓Payment processing handled entirely by PCI-compliant providers
- ✓Automated backups to prevent data loss
- ✓Incident response plan for any potential security events
Questions about your data?
Read our Privacy Policy or get in touch with our team directly.