🛡️
Your Privacy, Our Promise
We handle your family's most precious memories with the highest level of care. Here's exactly how we protect you.
🔒
AES-256
Encryption
🇸🇬
PDPA
Singapore
🇪🇺
GDPR
Europe
🚫
No AI Training
Ever
🔒 Encryption & Security
- • All data encrypted at rest with AES-256
- • TLS 1.3 for all data in transit
- • Zero-knowledge architecture — only you and your invited family can decrypt your data
- • Annual third-party security audits
- • $1M data breach insurance for the first year
👨👩👧👦 Access Control
- • Private by default — your avatar is never indexed, never public
- • You invite who you want — granular permissions (view only, contribute, chat)
- • Next-of-kin consent required — legal authorization before any avatar is created
- • Revoke access instantly — remove any family member with one click
- • Activity logs — see exactly who accessed what, when
🚫 What We Will Never Do
- ❌ Sell or share your data — not to advertisers, not to third parties
- ❌ Train AI models on your family — your voice and stories stay yours
- ❌ Make your content public — no memorial pages on the open internet by default
- ❌ Share with law enforcement — without a valid court order, and we'll notify you first
- ❌ Use your data for research — without explicit opt-in consent
🗑️ Your Right to Delete
- • Delete everything — full account deletion within 30 days, no questions asked
- • Export your data — download all conversations, voice recordings, memories anytime
- • Remove specific content — delete individual memories without deleting the whole avatar
- • Cancel anytime — no long-term contracts, cancel with 30 days notice
📋 Data Storage Details
- • Where: Secure cloud servers in Singapore and Frankfurt (your choice)
- • How long: Stored while account is active, deleted within 30 days of cancellation
- • Voice recordings: Stored separately, highest security tier
- • Conversations: Encrypted, auto-deleted after 12 months unless you choose to keep them
- • Family contributions: Attributed to contributors, who can request removal
✅ Compliance
- • Singapore PDPA — Personal Data Protection Act fully compliant
- • GDPR Article 27 — EU representative appointed for European users
- • California Consumer Privacy Act (CCPA) — rights fully honored
- • ICO UK — UK information commissioner registered
⚠️ Crisis & Safety
- • No dark patterns — we never manipulate or guilt you into sharing
- • Crisis resources — grief support hotlines and counselors available in-app
- • Safety alerts — if concerning content detected, we alert designated family contacts (with consent)
- • No surveillance — our safety measures are for protection, not monitoring
Last updated: April 2026 | Apricot Blossom Technologies Pte. Ltd.