Back

Autograph Privacy Promise

Privacy is not a setting. It is the foundation.

Autograph is built for memories people usually protect: a parent's voice, a child's question, a family conflict, a diagnosis, a wedding toast, a goodbye. We treat that material as entrusted, not extracted.

Read the legal privacy policyAsk a privacy question

Autograph privacy promises

Private by default

Your Journal, Memory Projects, and Groups are not public rooms. Stories are shared only by your choice, with access that can be edited or revoked.

Stewards, not owners

Your voice, stories, photos, family context, and unfinished drafts belong to you. Autograph's job is to help preserve them, not to take possession of them.

Sensitive-data care

We are in the process of becoming HIPAA compliant. We do not claim completed HIPAA compliance, but we treat intimate and health-adjacent information with medical-data-level care.

Privacy has to match the way families actually share.

Some stories are just for you. Some are for a spouse, sibling, child, collaborator, or invited guest. Some Memory Projects need many voices without becoming public. Autograph's product language and access controls should make those boundaries visible.

Journal

A private place for your own reflections and Walter conversations unless you decide to share something.

Memory Projects

A project workspace for invited people to contribute memories around a wedding, memorial, reunion, milestone, or family era.

Groups

A bounded sharing space where roles should make it clear who can contribute, view, and manage access.

Storytellers, Contributors, Free users, and Guests

People should understand why they were invited, what they can see, what they can add, and when their access is limited.

In short: Journal, Memory Projects, Groups, Storytellers, Contributors, Free users, and Guests all need privacy expectations that match their real role in the story.

What we will not hide

Trust is earned by saying the sharp parts plainly.

No surprise audience

A memory shared with Walter, a family member, or a project should not quietly become visible to a wider circle.

AI stays in service of the story

Walter and other AI systems should help ask, organize, and shape. They should not become an excuse for broad internal access or vague secondary use.

Plain language before legal language

The legal Privacy Policy matters, but it should not be the first time you learn what kind of care your memories deserve.

Our compliance posture is in progress, and we will say that directly.

We are in the process of becoming HIPAA compliant. That does not turn every family story into a medical record, and it does not let us claim a finished certification before the work is done. It does mean our bar is higher than a normal consumer app: sensitive memories deserve controls, documentation, and restraint that match their emotional weight.