Make sure your digital life reaches the right hands.

Loomkeeper is a blend of heirloom and keeper — the people you choose to receive and look after your digital content. You can assign different Loomkeepers to different folders, files or messages, so each thing reaches exactly the right person.

We recommend keeping the roles separate — it’s best not to set the same person as both a Loomkeeper and a verification contact. Verification contacts decide whether your content is released; Loomkeepers are the ones who receive it. Keeping those circles distinct preserves the multi-party check that protects you.

People you trust to confirm your passing when the time comes. We recommend adding at least 2–3 contacts — they need to sign up so we have their details on file, but that’s it. We will not contact them until it’s actually required. No onboarding emails, no marketing, no nudges, no “just checking in” messages. They live quietly in your account until the day they’re needed.

They become involved in two situations: (1) we reach out to them if we suspect you may have passed away and need to start a death inquiry, or (2) they log in to the application themselves to report you as deceased, which initiates an inquiry. Either way, the inquiry requires multiple confirmations before anything is released — one person can’t act alone.

A death inquiry can be initiated in one of two ways:

1. A failed payment with no response. If your subscription payment fails and we can’t reach you to update or cancel after several attempts, that’s treated as a suspicious silence and starts an inquiry.
2. A verification contact reports you as deceased. They log in to the application and submit the report, which starts an inquiry.

The inquiry flow. First, we try to reach you by email several times and give you a 60-day window to confirm you’re alive — one click is enough. If we hear nothing during those 60 days, we then notify your verification contacts and open a 7-day vote. At the end of the vote, the inquiry concludes that you’re either alive or deceased.

A sign of life ends the inquiry instantly. At any point during the inquiry — including during the verification-contact vote — if we receive a sign of life from you, the entire process is stopped immediately and your account returns to normal.

A one-way cold storage vault for your digital assets — documents, photos, account credentials, anything you'd hate to lose. Files are encrypted on your device before upload, stored in a region you choose, and cannot be edited or downloaded after upload (so they can't be tampered with).

Any time, from your settings. We don't bill you again after cancellation, and you keep access to your vault for the rest of the paid period.

Your vault stays fully active until the end of your current paid period — so if you cancel mid-month, nothing changes until that month ends. After that, you enter a 7-day grace period during which you can reactivate your subscription and restore everything. There is no way to download your files — the Vault is one-way cold storage by design, and that doesn’t change at cancellation. If you don’t reactivate within those 7 days, every file and folder in your Vault is permanently and irreversibly deleted. Gone forever, with no recovery. Afterlife Messages are a separate, standalone service — they’re not affected by canceling your Vault subscription.

Record a video, voice note or written message, choose a single recipient, then pick one of three delivery rules:

1. A specific date, time and year. The message is delivered on that exact moment — but only if you’ve passed away by then. If you’re still around, it’s never sent.
2. An anniversary date, X years after your passing. Pick a day and month (no year) and choose how many years after your death it should arrive. Sent once on that anniversary — not recurring.
3. A fixed period after your passing. A set number of days, months or years after your death (up to 5 years).

Messages are encrypted at rest and only released after your verification contacts confirm. Recipients can watch or read the message in the browser and download a copy to their device. The message is automatically deleted from our servers 30 days after delivery.

Files are encrypted on your device before they ever leave you, using industry-standard cryptography. They’re held behind multiple isolated layers of protection, so nothing is browsable, previewable or readable in transit or at rest — not by us, not by anyone else. In fact, your Loomkeepers don’t even know they’ve been named — we never notify them, contact them, or hint at their role until your digital content is actually released. Until that day, they have no idea you’ve chosen them.