Its own database
One per person. For Corp, one per department. For Care, one per patient.
Isolation
Every other assistant keeps one big store and writes a rule in front of it. Your memory is a store of its own, with nobody else inside it. That is the whole design, and everything else on this site rests on it.
The difference
One of these is enforced by the shape of the system. The other is enforced by a line of code that has to be right every single time.
Your rows and a stranger's rows live in the same table, and what keeps them apart is a condition in a query. When a model writes that query, the condition is a suggestion: one prompt, one bug, one forgotten clause, and the wall is gone.
Your memory is a database of its own, with its own credentials. The query that would read somebody else's life has nothing to read: the rows are not in the same place, and the connection does not reach them.
A model cannot leak what it cannot see. The other databases are not there to be read.
What a boundary is made of
One per person. For Corp, one per department. For Care, one per patient.
A connection that opens your store and no other, issued for you and revoked with you.
Backed up and restored on its own, so recovering one person never touches another.
Deleting everything means dropping your store, not marking rows and hoping every copy of the query agrees.
What the model reaches
The model that writes MeYou's reply gets the conversation and what your own memory brought back. It does not get your name, your number or anyone else's memory.
Speech becomes text as it is spoken and the audio is gone. What stays is the sentence, with the date you said it.
Your conversations are not used for advertising, not sold, and not used to train anyone's model, including ours.
Servers are in the European Union. The full list of who touches what, and what each of them gets, is on the privacy page.
What it means for you
A mistake in a query returns nothing instead of returning somebody else's life. The blast radius of an error is one store: yours, and only the part the error touched.
Your export is your store, whole and in order, because there is nothing to untangle it from.
Delete a memory and the row goes. Delete the account and the store goes with it, backups included, on the schedule the privacy page sets out.
Waitlist
MeYou is live with early users. Leave your address and you hear from us first, when it opens where you are.
One address, one message. It is not sold, and it is not the start of a mailing list.