Zero-monetization privacy
We commit not to sell or lease your personal data or use it for behavioral advertising. No advertising trackers or behavioral targeting engine are implemented here.
Commitment · legal policy review required
Leading with Guarantees
Customers. Never products.
Trust means knowing what we promise, what works today, and what still needs independent validation.
These are product commitments, not a substitute for legally reviewed contractual terms. Binding guarantees, retention exceptions and any subscription or fee model must be approved and disclosed before launch.
The right to leave
One-click account export and a clear deletion request. Our erasure target is 48 hours; complete server and backup scrubbing is not yet operationally verified.
Export and requests available · erasure automation pending
Algorithmic transparency
No hidden recommendations. Activity is chronological by default. You can choose manual pins instead. Member mail TI uses deterministic on-device text tools.
Controls available
No dark patterns
No pre-checked TI or verification consent. General access does not require real-world identity verification. Controls to export, leave and cancel a pending request remain easy to reach.
Controls available
High-trust services
On-device processing
Private notes are encrypted locally with your own passphrase, then downloaded. No biometric collection or identity document upload is introduced.
Encryption boundaries
New member messages, subjects and saved drafts use end-to-end encryption with your mail passphrase. TI text tools operate on-device. Addresses, timing and routing metadata remain visible. Legacy and outside mail are not retroactively encrypted. Other platforms need the encrypted messaging connector before exchanging protected messages.
Pseudonymous access
Use a display name or alias and your issued address. No outside email or phone is required. These accounts are pseudonymous, not untraceable; regulated services can require verification.
Data auditing
Your timeline records new handoffs, TI requests, exports and deletion requests. Comprehensive infrastructure and administrator access auditing still needs independent validation.
Digital well-being
Finite lists instead of endless feeds. Choose an optional browser-level daily usage boundary; privacy settings, exporting and leaving are never blocked.
Open security core
Read the public vault cryptography source and technical security notes. Public repository publication, licensing and independent audit are not yet established.
Independent ethics board
A third-party oversight board is a commitment, not an existing body. Members, charter, conflict-of-interest rules and launch-review procedures remain to be appointed.