The data you entrust to us is the most intimate that exists. Here's how we protect it — no fluff, no empty promises.
An honest premise. No system is 100% invulnerable. What we can do is reduce the attack surface, segment data, encrypt wherever possible, and make every access traceable. What we can't do is promise the impossible. What we won't do is hide how we work behind slogans.
Memories, conversations, profiles, contacts, capsule contents, billing data: everything is encrypted on disk with AES-256-GCM. Even a database dump wouldn't reveal your content without the decryption key.
Only the structural data needed for the AI to work (category tags, sensitivity flags, semantic vectors for search) stays in the clear. Everything you read, write and remember is encrypted.
When the AI processes a conversation, the names and emails of the people in your Bonds are masked before leaving the server. You always see the originals; the providers receive opaque identifiers in their place. The limits of pseudonymisation are set out in the privacy policy.
The pseudo-identifier ↔ real-name map is rebuilt on-the-fly from the structured data in your account, never persisted elsewhere. Your AlterEgo still answers specific personal questions because we de-pseudonymise the reply before showing it to you.
Database backups are encrypted with a dedicated key, distinct from the live database key. Even if a backup is exposed, without both keys it's unreadable.
Backups have a maximum retention of 12 months. When you delete your data, it's also removed from backups within that window: after 12 months at the latest, no trace remains anywhere.
Full export of your data (art. 20), real deletion (art. 17), granular consents (art. 7), transparent disclosure (art. 13-14), right to object (art. 21).
Service designed in Italy, data hosted in Europe. Non-EU transfers only to AI providers with a documented impact assessment.
Every reply from your AlterEgo is flagged as AI-generated. The system doesn't pretend to be you: it's a declared representation, not a replacement.
Capsule recipients who talk with your AlterEgo always know they're conversing with an AI. Never hidden impersonation.
Post-mortem directives signed while you're alive: continue, freeze, delete. Never applied automatically for final actions — always with verification and audit.
The digital fiduciaries you designate can activate your digital will only after a formal declaration made under their own responsibility, taken in charge by our administration and reviewed according to the relevant national rules. Final deletions require admin approval with full audit trail.
Every sensitive action — both by staff (deletions, post-mortem approvals, backup downloads, user management) and security events on your account (password changes, account deletion, consent changes, admin sign-ins) — is recorded in an append-only audit log.
Audit entries are retained for at most 12 months, in line with the backup window. A weekly sentinel detects anomalies automatically and notifies admins by visible email. No critical action can be performed without leaving a trace.
Encryption keys are rotated periodically. In case of suspected compromise, documented procedures and scripts allow immediate rotation.
In case of an incident that may expose personal data, we notify the supervisory authority within 72 hours (GDPR art. 33) and affected users if the risk is high (art. 34).
The full documents are published on the site: Privacy notice (/privacy), Terms & conditions (/terms) and Cookie policy (/cookies), plus the DreamersWare Payments purchase corpus linked in the footer. If you have specific questions before you start, write to us.