One page, so you don't have to take our word for it.

It is one person. No investors, no growth team, no board writing the roadmap. You would find that out anyway, so here it is up front — and here is what it actually means for you:

• Nobody is pushing me to make this stickier. There is no round to raise, so there is no reason to add a feed, a streak you can lose, or a reason to charge you for the exit.
• The person who answers your email wrote the code. No ticket queue, no first-line script, nobody to escalate to.
• And the honest risk: if I stop, this stops. That is exactly why the export is designed to work offline with your password and no help from us, why the shutdown notice is 90 days in writing, and why your notes are encrypted with a key we do not hold — the file you take away is complete, not a sample.

If a one-person product is not what you want for something this personal, that is a fair reading. Take the export and go: it is free, and it does not need us.

You pay Creem, not us. Creem is the merchant of record: they take the card, handle sales tax, and send the receipt. Your card number never reaches our server — we never see it, and we could not store it if we wanted to.

There is no subscription. $49 buys a year of Guard; when the year ends it simply ends. Nothing renews itself, nothing is charged quietly, and your writing never gets locked away — export stays free on every plan, including after it ends.

30 days, no questions. Reply to your receipt, or write to hello@neverfarapp.com from the address you signed up with, and the refund goes back the same way it came. A refund revokes Guard; it never touches your records.

What we keep after you leave: the receipt record, because tax law requires it. It contains an amount, a date and your email. Not one word of what you wrote.

One server, one SQLite file, no cloud vendor in the middle. Every day a snapshot is taken of the database and checked — opened, verified, counted — because a backup nobody has read is not a backup. Seven are kept, then the oldest goes.

Photos and recordings are pinned to a note the moment they are saved, so they are mirror-copied once and left alone. Losing the server loses a day at most, never the file you sent last year.

If you want to check this instead of trusting it: npm run backup prints the snapshot it just wrote, its size and how many accounts it contains.

We can't email you a reset link, because there is nothing to reset — we never held your key. What does work is a recovery code: it wraps the same key a second time, so using it reopens your notes instead of replacing them.

Make one while you are signed in and keep it with your passport. If you lose both the password and the code, the writing is gone — we would rather say that here than discover it with you later.

90 days' notice, by email, to everyone with an account. Export stays open until the last day, and it stays free.

The export is a standard archive that opens offline with your password — it does not phone home, does not need a licence, and will still open in twenty years. Test it before you trust it: it is in the app, on the free plan, right now.

Take everything: one click, any plan, forever.

Delete your account: Settings → Delete account. It asks for your password, then removes your records, photos, recordings, letters, cards, guardians and the account itself in a single transaction. We tell you plainly what happens and do not make you email support to be forgotten. What remains is the receipt record described above, and the snapshots above — kept seven days, then gone for good.

Kept short and honest. If a version number appears in a bug report, this is the list it refers to.

• 0.2.0 — Sealed cards (only the recipient can open them), Moments (on this day, timeline, photos), handing records on to a guardian, and this page.
• 0.1.0 — Notes, letters that arrive later, guardians, export, cards.