Privacy centre · By design, not by policy
How this actually works
A privacy promise you cannot check is not worth much. So rather than describe the encryption, this page runs it on your own words — and rather than summarise what we can see, it lists all of it.
Try it right here
Write something. Watch it become unreadable.
This runs the product’s actual encryption in your browser, on your words. Nothing is sent anywhere — there is no network request on this page.
When Echo reflects on a memory
A language model cannot reflect on words it cannot read, so this is the one moment a memory is readable outside your phone. On the attested path it is read inside a sealed chip that signs what code it ran — and the receipt says so. A receipt also says when an access was not attested; the two can never look the same.
- 1. You askYou tap Reflect on one memory and confirm the disclosure (v1).
- 2. Opened on your phoneThat one memory is decrypted on your device and sent over TLS. Our API relays it and writes nothing down.
- 3. Read inside a sealed chipThe model runs in an Intel TDX + NVIDIA confidential enclave. The hardware signs which code was loaded.
- 4. Back, and sealed againThe reply returns to your phone and is encrypted there before it is stored. We keep only ciphertext.
- 5. A receipt anyone can checkA content-free receipt lands on Solana: consent version, enclave measurement, reply hash, time.
Where each step happens
Only two of these five touch our servers, and neither sees a readable word.
Happens on your device
You write it
In the browser, with no title, no tags and no categories to choose first. Nothing has been sent at this point, and nothing is saved until you say so.
There is no autosave and no draft sync. Close the tab here and the words are simply gone.
Step 1 of 5
What we can see
Both lists are complete. There is no column in our database for a title, a transcript, a mood or a tag — not an empty one, not a hidden one, and a build that adds one fails our checks before it ships.
What we can see
The complete list. There is nothing below this.
The date you saved something
A timestamp, to sort your vault
Whether it was voice or text
To know which player to show
How large the encrypted file is
To bill storage and spot abuse
That an access happened
Written to the public consent ledger
What we cannot
Not by policy — we built it so that we are unable to.
What you wrote or said
Encrypted before it leaves your device
A title, summary or transcript
No such column exists in our database
Your mood, tags or categories
The product never asks you for them
Anything after you forget it
The key is destroyed first, so the bytes are noise
What this costs you, stated plainly
Protection this strong has consequences, and they are not footnotes.
If you lose your phrase
Your memories stay locked, permanently. We cannot reset it and we cannot recover what is inside — not for you, not for someone asking on your behalf, not for a court order. This is the direct cost of everything above. Decide whether you accept it before you rely on this.
What forgetting really does
Deleting removes the encrypted file and its record. Forgetting goes further: it destroys the key first, so even if a copy survived in a backup, nothing can ever read it again. That includes us. Neither can be undone.
When anything is read by AI
Only when you tap Reflect on one specific memory, and only after you have read the disclosure and confirmed it. That one memory is decrypted on your device and sent for a response; your other memories are never included. We record which model answered and when — never what was said.
What we do not promise
This is not unbreakable, and no system is. A device already compromised can read what you type before we ever encrypt it, and we do not promise anonymity from someone with access to your device or your network. We do promise that a leak of our database or our storage does not expose what you wrote.
Check it without asking us
Every access to a memory writes a content-free receipt to a public ledger we cannot edit. You can read those receipts straight from the chain, with none of our servers involved in the answer.
Open the verifierUNSAID is not a therapy service, a crisis line, or a diagnostic tool. If you are in immediate danger, please contact a local emergency service or someone you trust.