SOVEREIGNTY / PRIVACY DESIGN
Your Zora.
Your own world.
A constellation can share standards and improve its software without combining the private lives of the people within it.
Personal stays personal
Each personal Zora has a separate context. Another Zora, company support or Prime receives no automatic right to your conversations, relationships, files or memories.
Sharing is a specific choice
Choose the exact summary, recipient, purpose and duration. Revoking access stops future reads. Anything already disclosed is recorded; it cannot be magically recalled.
Support without surveillance
The management plane handles versions, capabilities and service health. A support diagnostic is separately previewed and approved. Cancelling a feature should not erase your personal identity.
Improvement without private transcripts
Public fixes and synthetic tests can benefit everyone. Optional aggregate contributions need separate permission and privacy review. Sanitization alone is not a privacy guarantee.
What this edition actually does
| Implemented here | Still requires production proof |
|---|---|
| Site-scoped saved profiles; downloadable saved data; optional history; separate history clearing; reviewed feedback summary. | Existing-account integration, export across other services and verified backup retention. |
| Reference tests for tenant separation, purpose-bound disclosures, expiration and revocation. | Deployed tenant encryption, independent key custody and full infrastructure access review. |
| Metadata-only fleet reference, signed artifact staging and owner consent checks. | Cryptographically verified device installation and operational support integration. |
| Opted-in categorical contribution reference with small-group suppression. | Differential privacy, secure aggregation and independently validated shared model learning. |
Simple enough for play. Clear enough for trust.
The family design keeps play and learning separate from an adult’s private context, finances and authority. Guardians choose game permissions and can stop a session. This release includes boundary tests; it does not launch a child-specific service or a new Minecraft integration.
The website download includes only your saved profile, history and requests. Clearing history turns saving off and rejects late replies from before the change. Deletion removes active website records; provider records, infrastructure logs and backups are separate.
In this private workspace, submitted live questions would be processed by the configured AI service. Browser dictation may use the browser’s speech provider. Optional saved history is stored by this site. This is not a claim that the operator is cryptographically unable to access stored data.