Not another tool
to manage.

Your keys, your data. We can't read what's stored.

Your encryption keys live on your device and never leave it. Every calendar entry, school email, task, and family document is encrypted at rest with keys only your family holds. Not even Polipo engineers or server administrators can access your stored data. When Polipo actively processes a request, only the minimum context needed leaves your encrypted pod — and nothing is retained afterward.

Your own infrastructure. Encrypted, isolated, deletable.

Every family runs in its own isolated container — own database, own compute, own encryption keys. A breach of one pod can never impact another. And because everything lives in your pod, you can wipe all your data with one action — no fragments scattered across shared tables or backups. Combined with encryption at rest, even a compromised server yields nothing readable from your stored data.

Not a policy toggle. A contractual guarantee.

Your conversations, school emails, calendars, and documents are never used to train AI models. This is contractually enforced across every AI provider we use under commercial zero-retention terms. When Polipo processes your request, only the context needed for that specific task is sent to the AI — processed statelessly and discarded immediately. No logs, no storage, no training. Ever.