How your data is protected

Private by default

Every space is private and invite-only. Access is enforced at the database level (row-level security), so one family can never see another family’s content.

Encryption — what’s true

• Future Letters are end-to-end encrypted in your browser — sealed with your passphrase and a one-time recovery code before they’re uploaded, so LifeMantle’s servers only ever store unreadable ciphertext and can’t read them. As a safety net, the space owner (and co-owner) also holds a recovery key and can recover any letter in the family’s space if a passphrase is ever lost. That recovery key is itself protected by a password only the owner holds — LifeMantle can’t use it. Keep your passphrase, recovery code, and the owner recovery password somewhere safe (a password manager).
• The Vault encrypts photos in your browser before upload.
• Everything else (feed photos, timeline, growth, comments) is encrypted in transit (TLS) and at rest (disk encryption). To provide the service, our systems can technically read this content. We never sell it or use it for advertising.

Accounts

Passwords are hashed; you can add two-factor authentication (authenticator app). Sign-in is protected against automated abuse.

Your data is yours

You can export everything at any time and request deletion. See our Privacy Policy for details.

If you find a security issue, please email privacy@lifemantle.com.