Skip to content

Our Promise

Your Privacy, Our Promise

We handle your family's most precious memories with the highest level of care. Here's exactly how we protect you.

AES-256

Encryption

PDPA

Singapore

GDPR

Europe

No AI Training

Ever

Encryption & Security

  • All data encrypted at rest with AES-256
  • TLS 1.3 for all data in transit
  • Zero-knowledge architecture — only you and your invited family can decrypt your data
  • Annual third-party security audits
  • $1M data breach insurance for the first year

Access Control

  • Private by default — your avatar is never indexed, never public
  • You invite who you want — granular permissions (view only, contribute, chat)
  • Next-of-kin consent required — legal authorization before any avatar is created
  • Revoke access instantly — remove any family member with one click
  • Activity logs — see exactly who accessed what, when

What We Will Never Do

  • Sell or share your data — not to advertisers, not to third parties
  • Train AI models on your family — your voice and stories stay yours
  • Make your content public — no memorial pages on the open internet by default
  • Share with law enforcement — without a valid court order, and we'll notify you first
  • Use your data for research — without explicit opt-in consent

Your Right to Delete

  • Delete everything — full account deletion within 30 days, no questions asked
  • Export your data — download all conversations, voice recordings, memories anytime
  • Remove specific content — delete individual memories without deleting the whole avatar
  • Cancel anytime — no long-term contracts, cancel with 30 days notice

Data Storage Details

  • Where: Secure cloud servers in Singapore and Frankfurt (your choice)
  • How long: Stored while account is active, deleted within 30 days of cancellation
  • Voice recordings: Stored separately, highest security tier
  • Conversations: Encrypted, auto-deleted after 12 months unless you choose to keep them
  • Family contributions: Attributed to contributors, who can request removal

Compliance

  • Singapore PDPA — Personal Data Protection Act fully compliant
  • GDPR Article 27 — EU representative appointed for European users
  • CCPA — California Consumer Privacy Act rights fully honored
  • ICO UK — UK information commissioner registered

Questions about privacy?

Our data protection officer is happy to help.

Contact Us

Last updated: April 2026 | Apricot Blossom Technologies Pte. Ltd.