Security & privacy
Your memories deserve more than a promise.
Dear Tomorrow holds some of the most personal messages a person can leave behind. We protect them the way we’d want our own protected — encrypted end to end, released only when they should be, and never readable by us along the way.
Encrypted at rest and in transit
Every message, recording, and recipient detail is encrypted before it touches our database. Sensitive fields — your name, email, and phone — are sealed with field-level encryption, and all traffic runs over TLS.
You hold the keys
Message payloads are encrypted with per-message keys that are unwrapped only for you and your chosen recipients. We can't read your memories, and neither can anyone who might get a copy of the raw data.
Human-verified release
A message is only delivered when the moment is right. Your nominated confirmers verify the trigger through a multi-step chain before anything is sent — no accidental early delivery, no unattended release.
Accounts you can trust
One-time email codes, brute-force lockout that escalates on repeated failures, and instant session revocation across every device the moment you change your password.
Resilient infrastructure
Hosted on managed, access-controlled cloud infrastructure in your region, with encrypted, point-in-time backups so your vault survives hardware failure without ever leaving its protected boundary.
Privacy by design
We collect only what a message needs to reach the right person. Raw IP addresses are hashed, retention windows are enforced automatically, and you can export or delete your vault at any time.
Found something?
We welcome responsible disclosure. If you believe you’ve found a vulnerability, email [email protected] and we’ll get back to you promptly. Please give us a reasonable window to investigate before any public disclosure.