Penny protects stored memory content with AES-256-GCM encryption and a key unique to your account. The key is wrapped through AWS Key Management Service in a separate cloud account from the database. Connections to the service use HTTPS to protect information in transit.
Your chosen AI tool needs readable memory to use it in a conversation. Penny decrypts the relevant content when an authorized request or service process needs it. We hold and operate the encryption keys.
Every time Penny's service decrypts your memory, it's on record in your dashboard and sealed into a public, tamper-evident log. Routine reads and processing are covered by daily commitments; out-of-the-ordinary access is published individually.
You can review the service's decryption history in Settings → Privacy and stop a connected tool's future access in Settings → Connections. These controls do not erase data already received by that tool.
For the full privacy and security details, read the Privacy page. It also explains the readable search embeddings used to find relevant memories and the protections that end when content reaches the AI provider you chose.