Privacy Policy

DigitalMe is operated by DigitalMe, PBC, a Texas public benefit corporation. In this policy, "we" and "us" mean DigitalMe, PBC, and "you" means the person whose vault it is.

Everything you put in your vault, and everything your DigitalMe creates for you, is your property. We act as the custodian of that data, not its owner. We claim no right to use your vault contents for our own purposes.

• What you put in your vault: files, texts, links, and the answers you give your DigitalMe. We use these only to provide the service to you: storage, retrieval, alignment, and watermarking.
• Setup signals: the links you choose to share and the public-footprint research you ask us to run, used only to help your DigitalMe understand you. You confirm or reject the result, and a rejected result is discarded.
• Account and operational data: the account you sign in with and the minimal logs we need to operate and secure the service.
• iPhone notifications: when notifications are enabled, we store your Apple push token and registration details linked to your account. For human-to-human message alerts, we send Apple that token, a display name, a fixed alert label and identifiers used to open the conversation. We do not include message text, audio or vault contents in these push payloads. We also store delivery records linking message, conversation, account and device-registration identifiers with timestamps, attempt counts and delivery outcomes. These delivery records do not contain the raw Apple push token or message contents.

We do not secretly collect your contacts, location, or communications. Anything like that happens only after you explicitly turn it on, and you can turn it off.

• We do not train any AI model on your vault contents.
• We do not sell, rent, or share your data with advertisers or data brokers.
• We do not give outside AI models access to your private footprint. When an outside AI helps answer something, it receives only the minimum needed for that request, and its answer is saved back into your vault as yours.
• We do not read your vault to profile you or market to you.

Supported PNG, JPEG, and PDF files can receive an ownership watermark: the legal name you chose, a confidential / do-not-train / do-not-distribute notice, and a provenance link. This is a record of custody and timestamp, not a claim of legal title to material you did not create. Please only save material you have the right to hold.

We share your data only when you direct a supported action, such as sending an in-app message. Otherwise we do not share it, except where the law requires, in which case we will tell you unless we are legally prohibited from doing so. The service providers in the next section act on our instructions and are not sharing in this sense.

We hold your vault with access controls and an auditable trail of who touched what. No system is perfectly secure, so we use commercially reasonable safeguards and will notify you of a breach as the law requires.

Message alerts have a one-hour sending window after they enter notification processing. We send Apple the same expiry time; expiry does not remove an alert already displayed. Once a delivery finishes processing, its delivery records become eligible for deletion after 24 hours. Cleanup runs in batches, so records may remain longer when cleanup is delayed, disabled or unavailable.

Turning off alerts in iOS or the in-app notification setting does not delete stored registrations or delivery records. iOS settings control whether alerts are displayed. Unregistering a device or retiring an invalid token prevents further sends using that registration unless it is registered again, but we retain its token and registration record without an automatic expiry. Account deletion removes these registration records and related delivery records from our active database during its deletion process; it does not recall notifications already submitted to Apple or shown on a device.

We use service providers to run DigitalMe. Each one processes data only on our instructions and only to provide its service to us, never for its own purposes.

• Hosting, storage, and encryption key management: Google Cloud.
• AI models that answer the requests your DigitalMe sends them: OpenRouter, OpenAI, Google, DeepSeek, and Anthropic. Each request carries only the minimum needed for that request, as described above.
• Web searches your DigitalMe runs for you in chat, and public-footprint research you ask us to run: Tavily.
• Email delivery: Resend. Text message delivery: Twilio.
• Payments: Stripe on the web, and Apple for purchases made in the iOS app. Card details go to the payment provider and never reach us.
• Sign-in: Google and Apple, when you choose them.
• iPhone notification delivery: Apple Push Notification service.

• Export: download individual stored files from your Vault. A complete account export is not available yet.
• Forget: remove an individual memory from DigitalMe retrieval.
• Delete: delete your account from Settings. Deletion signs you out and removes your account and your stored data; file cleanup finishes in the background. A subscription bought through the App Store is cancelled with Apple.
• Inheritance: record a beneficiary preference during setup. Transfer and activation are not available yet.
• See and correct: view and correct the account information we hold about you.

This service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created a vault, contact us and we will delete it.

If we make a material change, we will post it here and, where the law requires, notify you.

Questions about your privacy: stuart@digitalme.club.