Skip to content

Security

Nobody can read your memory without your phone.

Not an AI. Not a hacker. Not even us. Here is how SecondMemory is built to keep that true, and where we are still heading.

How it fits together.

How SecondMemory keeps your memory lockedYour phone holds a key for each drawer: Work, Personal and Private. What the phone sends is sealed to the drawer before it leaves. The memory container stores every drawer sealed and opens one only with a key lent for the request. An AI needs a grant your phone approved, and asking for Private needs your fingerprint or face unlock every time.Your phoneholds a key for each drawerWorkPersonalPrivateNotes and recordings are sealedhere, before they leave the phonePrivate opens only with yourfingerprint or face unlock, every timeonly sealedMemory containerMicrosoft Azure · Australia EastWorksealedPersonalsealedPrivatesealedOpens a drawer in memory onlywith a key lent for the request,then locks it againgrantAI assistantsconnect over MCPClaudeChatGPTCoding agentNeeds a grant your phone approved:which drawers, read or add, 30 days at mostAsking for Private goes to your phone: an alertwith no content, then a one-time key for 5 minutes
How SecondMemory keeps your memory lockedYour phone holds a key for each drawer: Work, Personal and Private. What the phone sends is sealed to the drawer before it leaves. The memory container stores every drawer sealed and opens one only with a key lent for the request. An AI needs a grant your phone approved, and asking for Private needs your fingerprint or face unlock every time.Your phoneholds a key for each drawerWorkPersonalPrivateNotes and recordings aresealed to the drawer here,before they leave the phonePrivate opens only withyour fingerprint or faceunlock, every timeAllow lends its key for one askOnly sealeditems travelMemory containerMicrosoft Azure · Australia EastWorksealedPersonalsealedPrivatesealedOpens a drawer in memory onlywith a key lent for the request,then locks it againAt rest: sealed files only.Idle drawers are wiped from memory.AI assistantsconnect over MCPClaudeChatGPTYour coding agentgrantNeeds a grant your phoneapproved: which drawers, reador add, for 30 days at mostNever a standing grant to PrivateAsking for Private: an alert with no content, then you decideone-time key,5 minutes

Eight things that keep it yours.

01

Three drawers, three keys.

Work, Personal and Private are sealed apart, each with its own key. Opening one never opens another.

02

Sealed before it travels.

Notes and recordings are sealed on your phone to the drawer's public key, and audio never leaves it. Mail and calendar are sealed the moment they are fetched. Anyone can seal to a drawer; only its key opens it.

03

Stored sealed, opened briefly.

Your memory is kept as sealed files (AES-256-GCM). To answer, a memory container opens one drawer in memory with a key lent for that request. Nothing unsealed is written to disk, and an idle drawer is wiped from memory within ten minutes.

04

Every AI needs a grant.

An AI gets only what you chose: which drawers, whether it may add, for 30 days at most. The key is split: the AI holds one half and our grants service the other, so neither opens anything alone. Revoke it in one tap.

05

Private needs your phone.

No AI ever gets a standing grant to Private. When one asks, your phone shows an alert with no content; who is asking and why appear after your fingerprint or face unlock. Allow lends the key for that one ask, or for that assistant's asks over the next hour if you choose. No answer in two minutes means no.

06

Every access is written down.

Each recall, grant and approval goes into an access log sealed to your own account key, so you are the one who can read it.

07

Delete it, and it's gone.

Deleting your account, once your phone approves it, destroys the keys. Any sealed copy left anywhere can never be opened again. Including by us.

08

Kept in Australia.

Your sealed memory, and the memory containers that open it, run on Microsoft Azure in Australia East (Sydney). Sign-in is handled by Clerk, which never sees your memory or your keys.

Plainly

What we don’t claim yet.

Security you can trust says where its edges are. These are ours today.

  • Your phone takes over the keys.

    When your account is first made, its keys are created for you and protected in our key vault. Setting up the phone app hands them to your phone. From then on, a new AI connection has to be approved there.

  • New mail is read with a grant from your phone.

    So Work and Personal keep up while your phone is in your pocket, your phone gives our reader a grant for those two drawers. Private is never opened that way: new Private items wait, still sealed, until you unlock them on your phone.

  • While a drawer is open, its software can read it.

    That is how a memory container answers, and how new mail becomes people, plans and promises. Reading mail uses an AI model, which sees the text it is given. We never train on your memory and never sell it. The details are in the app privacy notice.

  • Sealed computers are next.

    We are working towards running memory containers inside confidential computers, where a key is released only to software that proves what it is, so not even the people running the servers could look inside. That is not live yet.

Privacy at SecondMemoryApp privacy noticeDocs

Rent the AI. Own the memory.

Request an invite