You can check every word on this page.

Nothing here is a promise about how we behave. Every line below points at something you can go and look at — a receipt, a list, a log.

Nothing happens without your word.

Today your record reads, and it answers. That is the whole list. It cannot send, sign, pay, or speak in your name — none of that is built.

What it does today
Read what you connect, and answer from itevery answer showing where it came from
What it cannot do today
Send an email
Sign anything
Move money
Speak in your name

Everything below is about that one job: how a fact gets in, how it stays true, and who is allowed to ask.

The worst failure this can have is a wrong fact on a page only you can see. That is on purpose.

Every fact shows the words it came from.

Not a citation. The exact sentence, the message it was in, and the day it arrived — on every fact your record holds.

The fact
Home deductible — $2,500 from 1 October
The message it came from
… your policy renews on 1 October 2026. Please review the enclosed declarations page. Your all-other-perils deductible increases from $1,000 to $2,500 effective 1 October 2026. No action is required to accept these changes …
State Farm · received 28 August 2026 · renewal notice, p.2
If the quote is not word for word in the message, the fact is refused and never enters your record. We check that ourselves, on every single fact. We do not ask the AI to be honest about it.
See the same thing again in a second document and it does not become a second fact. It becomes a second receipt on the first one. Your record gets surer, not longer.

When two sources disagree, nobody picks a winner.

Two documents say different things. A tidier product would quietly choose one. Yours shows you both and asks.

One source says
Trust amended 6 February 2021
“… the First Amendment to the Petsche Family Trust, executed 6 February 2021 …”
Brandt & Cole · cover letter · 9 Feb 2021
The other says
Trust amended 14 January 2021
“… amended and restated as of January 14, 2021 …”
Executed instrument · p.1 · scanned 2021
Two sources disagree
The fact stays marked as conflicted, both receipts hang off it, and you get asked which one is right. Nothing here picks for you and nothing here hides the loser — the point of a record is that a disagreement is information, not a bug to be swept up.

Facts fade. They are never buried.

When something changes, the new value takes the front and the old one steps back — still readable, still carrying its receipt. Nothing your record learns can delete a fact or hide where it came from.

One factHome deductible
Now$2,500 · from 1 October 2026State Farm renewal · 28 Aug 2026
Superseded$1,000 · from 12 March 2019Policy declarations · 12 Mar 2019
Superseded$500 · from 4 June 2015Closing packet · 4 Jun 2015
Only you retire a fact. Everything else can change the order it appears in and raise a question about it — nothing else can take it away.

Your record asks when a fact gets old.

A record is only worth keeping if it is still true in ten years. Every kind of fact ages at its own rate. A deductible in about a year. Your accountant, rarely. What is in the safe, never. When one goes past due with nothing confirming it, you get asked rather than told.

Home deductibleconfirmed 3 weeks ago
Who does your taxesconfirmed April 2024
What is in the safedoes not age
Your brother’s addressnothing since 2012
“Nothing has confirmed this since 2012 — is it still true?”
Your answer resets the clock and becomes a receipt in your own words, sitting alongside the documents like any other source.

Your word outranks everything.

Say “that’s wrong”, “that changed” or “seal that” to the bar at the bottom of any page. No form, no ticket, no waiting.

What it held
Michael · 4118 Sunset Ave, Indianapolis
Christmas card list · scanned 2012
What you said
“That changed — he moved to Bloomington in 2021.”
You · 4 September 2026 · now the newest receipt

Your sentence is a receipt like any other, and it outranks every source that disagrees with it — including the documents. The ones it overruled stay in the history, so anyone reading later can see what you changed and when.

Your record counts where it keeps being wrong.

Every correction you make is tallied by the kind of fact it was. A kind that keeps being wrong loses the right to be believed on its own — from then on it needs a second source before anything of that kind gets in.

Dates on documents1 correction in 812believed on one source
Amounts and balances3 in 460believed on one source
Who someone is to you9 in 204believed on one source
Postal addresses14 in 96needs a second source
Nothing about this is hidden from you, and none of it can remove a fact. The worst it can do is make your record slower to believe something — which is the direction you want it to fail in.

Absence is a fact too.

Your record learns the rhythm of everything that reaches you — the statement, the premium, the subscription. When one breaks rhythm, that gets said, on the day the next one was due.

Mortgage statement
monthly · Chase
Escrow analysis
yearly · Chase
Disability premium
quarterly · Guardian
“The Guardian premium was due 14 May and nothing arrived. The seven before it did.”

A folder can hold every letter you ever received and still never tell you about the one that stopped coming. That is the failure this exists to fix.

Nobody looks until you say so.

You give a seat to one person — or one piece of software — over the parts you pick, and every time one opens your record it lands here, dated, on a page only you read.

WhenWho, and what they askedWhat came back
14 Aug · 11:02Priya“When was the trust last amended?”answered · 3 receipts
21 Aug · 16:35Marcus“What is left on the mortgage?”answered · 1 document
25 Aug · 07:15Your assistant“When does the policy renew?”answered · 1 receipt
28 Aug · 09:12Marcus“Is there anything about Dunmore?”nothing returned
That last one is sealed. A sealed fact never reaches the AI at all — not even when somebody asks the exact question it would answer. The refusal is a row you can read, and Marcus was not told there was anything to refuse.

Your archive never leaves our walls.

Everything in this category ships your mail off to somebody else’s search index to make it findable. Yours is searched on our own engine, on our own machines.

Your archive
Forty-one thousand messages and every document you have connected, searched by an engine we run ourselves.
never sent anywhere
the wall
What the AI gets
The handful of passages that answer the question in front of it. Not the folder they came from, not the ones next to them, and never a sealed one.
three or four paragraphs

Three switches only you can throw.

Not behaviour you have to trust. Controls, in Settings, that do what they say the moment you use them.

Never read these
Settings / Reading
Name a sender, a whole domain, or a word in a subject line. From then on it is never read — not into the index, not into an answer, not into the vault. And adding the rule deletes what is already here that matches it, because a control that only works going forward is not the control you thought you bought.
Take everything with you
Settings / Export
Two doors, both free, any day, on any plan. Everything as one file a machine can read, and a readable copy — plain files, one per part of your life, receipts included, that open anywhere and keep working forever. Leaving with your data in hand is part of the deal, not a tier.
Read the whole thing
Your Record
Every fact your record holds, every receipt behind it, and every question it has open — on one page, for you only. Any line on it can be overruled by a sentence from you. None of this is machinery you have to take on faith; it is a page you can go and read.

Where your record actually lives.

Locked on the way there, locked sitting still. A short list of companies touch it, and every one of them is named here.

GoogleThe mail and documents you connectThe key to your mailbox is stored scrambled. We never see your password.
AnthropicComposes answers from what your record hands itNever trains on your data. Never sees a sealed fact.
SupabaseSign-inNothing from inside your record.
RailwayHostingScrambled. They cannot read any of it.
CloudflareThe encrypted vaultScrambled. They cannot read any of it.
No one else. If that list changes, this page changes with it.
Only your copy learns.
What your record learns about you stays in your record. It never goes into anything anyone else uses.
Nobody reads your mail.
Machines read it. People do not. A few named people can look when something breaks, and every time they do it shows up on the same list you read.
You pay, so you are not the product.
We charge for the product. We do not sell your data and we do not run ads.
Every touch is on the log.
Settings shows what touched your data, when, and which AI account the reading ran on. Not a promise that we are open about it — the actual list.

Start your record.