Keeping it safe
Some of what people send will be the only recording of someone’s voice, or the only copy of their handwriting. We treat it that way.
Nothing here is public
There’s no feed, no profile and no page for a search engine to find. A collection is reached only through its links, which are long and random, and we tell search engines to stay away from them.
The link for sending lets people add a memory. It doesn’t show them what anyone else sent, unless the organizer chooses to let people read the others after they send one (some families like that for a memorial service). Anything hidden, kept private or sealed stays out of sight either way. The family’s link is for reading and listening, and anyone who has it can, so the organizer gives it to people they trust. Or they can turn the link off, so only family they’ve invited by email, who sign in, can see anything, and replace the link if it went further than they meant.
We don’t sell anything about anyone, and there are no ads.
Who sees what
| A memory that is | The organizer | The family link | The download |
|---|---|---|---|
| Shared, as most are | Sees it | Shows it | Includes it |
| Hidden by the organizer | Sees it | Doesn’t show it | Includes it |
| Kept for the organizers by the person who sent it | Sees it | Doesn’t show it | Includes it |
| Sealed until a date | Sees it | Shows it from that day | Includes it |
| From a new email address, not yet approved | Sees it, waiting for an OK | Doesn’t show it | Includes it |
No AI is trained on anyone’s memories
Voice memos and videos are transcribed so they can be read. That is the only thing AI is used for here, and every service we use for it agrees, in its terms, not to train on what it’s sent.
We send it the least we can: a small sound-only copy of the recording, never a name, a phone number or an email address. Cloudflare does the transcribing and doesn’t keep the audio.
Nothing is lost by mistake
We don’t delete anything anyone sends unless the family or the person who sent it asks us to. When an organizer hides or removes something, it’s set aside, not erased. Hidden things can be shown again with one tap, and we can restore anything removed.
Every text and email is saved exactly as it arrived before we do anything else with it, so a mistake on our side can’t lose a memory. Photos and recordings are kept in the form they were sent, alongside any copy we make so they play on every phone.
You can always leave with everything
An organizer can download the whole collection at any time: every word, who sent it and when, and a link to every original recording and photo. Nobody has to ask us, and nobody has to rely on us alone.
No passwords to steal
Organizers sign in with a link we email them. It works once and expires after twenty minutes. Sign-in links and sessions are stored only as scrambled fingerprints, so even we can’t read them back.
The details are in our privacy policy and terms.