Last updated: March 2026
We store your email address, the text you write in each capsule, photos you upload, optional metadata (titles, locations, dates), and chapter information. Everything is stored in Supabase (PostgreSQL + Storage) with servers in the region you were matched to at account creation.
Only you. All data is protected by Row Level Security (RLS) policies enforced at the database level — not just in application code. Capsule's servers use a service-role key only for AI write-back operations (writing the AI reflection and summary back to your account), never for reading or sharing your data with third parties.
When you save a capsule or request a chapter summary, your text (and optionally photos) are sent to OpenAI's API to generate a reflection or summary. OpenAI does not use data submitted via the API to train its models, per their API usage policy. Photos are sent as short-lived signed URLs and are not stored by OpenAI.
We do not sell your data. We do not display your data to other users. We do not use your memories to train any AI model. We do not retain your data after account deletion.
We use Google Analytics 4 to understand how visitors interact with our site (page views, feature usage). This data is aggregated and anonymized — it never includes the content of your memories. You can opt out by enabling your browser's "Do Not Track" setting or using a browser extension.
You can request account deletion by contacting us at wayntingliu@gmail.com. All your capsules, chapters, photos, and account data will be permanently deleted within 7 days of your request.