Privacy

This House invites honest language. That makes privacy a spiritual obligation, not a legal afterthought. The simplest version is this: your private walk stays yours unless you deliberately choose a feature that requires something more.

Four Different Kinds of Memory

Session-local context is the default and ends with the visit. Device-local journal material is authored and controlled by you. Thin preferences exist only when you deliberately set them. Covenanted Remembrance is the only memory allowed to shape a future Keeper conversation, and it requires a separate consent ceremony and a complete visible ledger.

Optional Account Sync

If you sign in, you can choose to back up your personal Walk and carry it across devices. The House encrypts this backup on your device before uploading it, using a key you hold. This encryption applies to the personal Walk backup; it does not apply to shared SIKIZANA conversations.

SIKIZANA Conversations and Private Thoughts

Messages and listening contributions you send are shared with the people in the conversation and processed by the House's service. Shared conversations are not currently end-to-end encrypted.

Private thoughts and unfinished listening drafts stay in this browser on this device, scoped to your account and conversation. They are not included in your personal Walk backup and do not follow you to another device. Clearing this device removes them.

Review with Keeper

In SIKIZANA, Review with Keeper → Explore example moments opens authored demonstrations. No AI assesses your selected thought, and this feature does not send it to a provider. You can revise and save the thought privately. This example experience is separate from the consent and readiness requirements for other Keeper features.

Keeper Companion Mode

Companion Mode has its own consent and readiness requirements. Personal Companion availability follows the active readiness profile and service controls; shared SIKIZANA Keeper features separately require current room consent, the shared Keeper setting, and available allowance. Ordinary consent never silently becomes cross-session remembrance consent.

Covenanted Remembrance

If this is later enabled, every entry must be visible, editable, exportable, and deletable. Revoking consent destroys the remembrance ledger. The House may not infer traits, diagnoses, engagement profiles, absence signals, third-party facts, or business assets from it. Safety review never reads remembrance or companion state.

Distress Language

If the app recognizes language involving suicide or self-harm, harm to others, abuse, psychosis or mania, or acute substance risk, ordinary frameworks stop before model contact. Safety review reads only the present words. It does not read memory or companion state.

What We Never Do

Erase Controls

The House separates removal into deliberate acts: clear this device, delete cloud backup, and delete account. Each one is explicit because each one removes something different.

The Plain Mechanics

Reverence should not require vagueness. Concretely:

• The site is hosted on Vercel.
• Your optional personal Walk backup is encrypted on your device before upload to Supabase. SIKIZANA private thoughts and listening drafts are excluded from that backup.
• Live Keeper features apply their own consent and availability checks: personal Companion uses its readiness controls, while shared SIKIZANA also checks room membership, consent, the shared Keeper setting, and allowance.
• The newsletter stores only the email address you give.
• A giving-opening notice keeps only the email address you submit, uses it only for one notice when secure giving opens, and does not enroll you in the Monthly Transmission.
• Erasing your account deletes everything it held. The in-app Erase tools remove data from your device at any time.
• Questions and requests: Paul@SecondHumanity.com.

What you bring to this House should be held with reverence.
We build accordingly.