Privacy Policy

Last updated: October 19, 2026

My Locket holds some of the most personal things a person can write down: the places, people, health, and events of a life. This policy explains what we collect, why, who else touches it, and what you can do about it.

The short version

We do not sell your personal information, or anything from your timeline, to anyone.
We do not use your timeline or conversations for advertising.
Your timeline and conversations are not used to train AI models.
Health information is optional, asked for explicitly, encrypted, and private by default. See Health information.
We use PostHog to understand how people use the site, not what they write in it.
You can delete your account, and everything in it, at any time.

What we collect

Your account. Your email address, your date of birth (to confirm you are an adult), and your password, which is stored hashed by our authentication provider and never seen by us. If you sign in with Google, we receive your email address from Google.

Your timeline. Everything you enter about a persona: profiles, places, property, relationships, health, events, pictures, and sharing settings. Timelines are encrypted where they are stored and are only visible to you and to the people you choose to share them with.

Health information has its own section below, because it is optional and handled more strictly than the rest.

Your conversations. When you chat with a persona, your messages and the relevant parts of the timeline are sent to our AI provider to generate a reply. We do not keep a copy of the conversation on our servers. We only count how many messages each persona receives per day, for usage statistics and limits.

Payments. Card payments are handled by Stripe. We never see or store your card number. We keep a record of what you bought and how you allocated credits.

Technical information. Your IP address is used briefly to limit abuse, such as too many sign-in attempts. A session cookie keeps you signed in.

Usage analytics. See Analytics below.

Health information

A timeline includes “health periods”: stretches of time that say when a persona was alive and able to talk. On their own they say nothing about health. Writing down what was going on, such as a condition, a disability, or what it did to daily life, is optional. The first time you try to add such a detail we tell you where it goes and ask you to agree explicitly; we record when you did. You can always leave health periods empty, and you never have to name a condition.

How it is used. Health details exist for one purpose: so that a persona can carry what its health meant for daily life during a conversation. We do not use them for anything else, do not analyse them, and do not share them with advertisers, data brokers, insurers, employers, or anyone else.

Who can see it. Nobody is assumed to know. Each slice of life starts out marked as a time when the people in it were not told about your health. A health detail reaches a conversation only when every slice of life the other person shared with the persona says they knew; when it does not, it is left out of what is sent to the AI entirely, not merely hidden by an instruction. People you share a persona with see only the health details their relationship was told about. Anything you mark “I did not tell anyone” never reaches anyone.

Where it goes. Health details are stored encrypted (AES-256) in our file storage at Supabase, and the keys are held separately from the data. During a conversation, the details the other person is marked as knowing are sent to Anthropic together with the rest of the relevant timeline to generate the reply; Anthropic does not use them to train its models. Nothing about your health is sent to our analytics provider. If you start building a timeline before you have an account, that draft, health details included, is kept unencrypted in your own browser until you sign up; we tell you so in the editor.

Your choices. You can edit or remove any health detail at any time. The Settings tab of each persona has a “Remove all health details” action that clears every condition, disability, and health-related note at once and withdraws your agreement; the health periods themselves stay, with their dates, so your timeline keeps working. If you delete your account and choose to preserve a persona for the people it was shared with, its health details are removed before it is preserved, and the preserved persona itself is removed a year later.

Other people’s health. You may be describing someone other than yourself. Only record what that person would be comfortable with you sharing, and leave it out if you are not sure. If you believe someone has recorded health information about you without your agreement, contact us and we will help.

Your rights. Health information is treated as sensitive or special-category personal information under laws such as the GDPR (Article 9), the California Privacy Rights Act, and consumer health data laws such as Washington’s My Health My Data Act. Wherever you live, you may withdraw your consent, ask us what health information we hold about you, ask us to delete it, and ask who it has been shared with, using the contact details below. We do not sell consumer health data and will not share it with anyone beyond the providers named in this policy without your explicit permission.

Analytics

We will be adding PostHog, a product analytics service, to help us understand how My Locket is used and where it can be improved. PostHog may collect information such as the pages you visit, the buttons you click, how long you stay, your browser and device type, and your approximate location derived from your IP address. It sets cookies or similar identifiers to recognise a returning visitor.

We configure PostHog so that it does not capture the contents of your timeline or your conversations: session recording is off, and text and form contents are masked on every page where a timeline is shown or edited. Analytics data is used only by us to improve the product. It is not used for advertising and is not sold.

How we use your information

To run My Locket: store your timeline, let you share it, and power conversations with personas.
To confirm you are old enough to use the service.
To process payments and keep track of credits.
To keep the service secure and prevent abuse.
To understand how the product is used, so we can improve it.
To contact you about your account, such as security or billing notices.

We do not sell your information

We do not sell, rent, or trade your personal information or any of the details on your timeline. We do not share it with advertisers or data brokers. That will not change without your explicit permission.

Who else handles your information

We rely on a small number of service providers to run My Locket. Each receives only what it needs to do its job, and is bound to protect it.

Supabase hosts our database, file storage, and sign-in.
Anthropic provides the AI model that speaks as a persona. It receives the conversation and the relevant timeline details, and does not use them to train its models. See our Statement on AI Usage.
Stripe processes payments.
Google, if you choose to sign in with Google.
PostHog, once added, for usage analytics.

Beyond these, your timeline is shared only with the people you choose. We may also disclose information if the law requires it, or to protect the safety of our users or the public.

Cookies and local storage

We use a cookie to keep you signed in. Your browser’s local storage holds your timeline view settings and, if you start building a timeline before signing up, that draft, until it is moved into your account. PostHog, once added, will use its own cookies as described above.

Keeping and deleting your information

We keep your information for as long as you have an account. You can delete your account at any time from your account page. When you do, we delete your account and your personas. If a persona has been shared with others, you can choose to preserve it for them; its health details are removed first, no one can edit it again, and it is removed a year after you leave.

Chat links you make for people in a persona’s life expire after 90 days and can be withdrawn at any time before that.

We may keep limited records after deletion where the law requires it, such as payment records for tax purposes.

Your choices and rights

You can view and edit everything on your timeline at any time, change who it is shared with, and delete it. Depending on where you live, you may also have the right to request a copy of your information, ask us to correct or delete it, or object to how we use it. To make a request, contact us using the details below.

Adults only

My Locket is only for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a minor has created an account, please let us know and we will remove it.

Security

Timelines are encrypted where they are stored (AES-256-GCM, with keys held separately from the data) and are accessed only through our own servers. Connections are encrypted in transit. Health details are only ever included in what is sent to our AI provider when the person in the conversation is marked as knowing them. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.

Changes to this policy

If we change this policy in a way that matters to you, we will update it here and let you know before the change takes effect.

Contact

Questions or requests about your privacy can be sent to [contact email].