Your memories will still be here.

Time Capsule is built around a simple faith: that what you seal today will be readable by whoever you meant to reach it — in ten years, in twenty-five, in more. That promise is easy to make and easy to break. We want to make it harder to break.

This page explains exactly what we're committing to, how we're structured to keep that commitment, and what you can do if we ever fail.

What we won't do

These are constraints we've placed on ourselves — not aspirations, not preferences. Constraints.

• We will never raise venture capital or take institutional investment. VC-backed companies get acquired. Acquired companies get shut down.
• We will never sell the service or its user data to a third party.
• We will not deliberately shut down without first giving users as much notice as circumstances allow and a practical route to retrieve the content that is technically available for export.
• We will not make an already sealed capsule inaccessible solely because its price changes later. Paid preservation terms are attached to the capsule or account when purchased.

The stewardship model

Single points of failure are the enemy of 30-year commitments. The founder gets sick. A company goes under. A country changes its laws. Any of these can end a service overnight.

The continuity model we are working toward would use five named custodians — people spread across countries and generations who could help keep the service accountable and operational if its founder cannot.

The intended group includes at least one custodian under 30 and people in more than one country. Until those people are confirmed publicly on this page, responsibility remains with the founder alone.

The proposed sustaining fund

A dedicated sustaining fund does not exist yet. Until it is formally created, ring-fenced and reported on this page, Legacy payments are ordinary operating revenue and we will not describe any portion of them as protected reserves.

Our intended model is to place a published percentage of future Legacy revenue into a separate reserve used only for continuity costs. If that structure is established, this page will state the percentage, legal owner, balance-reporting method and withdrawal rules. Until then, it is a plan, not a feature customers are buying.

Data portability — the hard guarantee

This is the one promise that doesn't depend on the service staying online.

Your memories belong to you. We are working toward a documented export format that lets unlocked content travel independently of this interface; until that export is implemented and tested, we will not market it as a completed guarantee.

What we're not promising

Honesty matters more than reassurance here.

• We are not promising the interface will look the same in 30 years. Technology changes. The UI will change.
• We are not promising every feature will exist forever. Some things may be deprecated.
• We are not promising uninterrupted uptime or zero data loss. We use backups, encryption and operational safeguards to reduce those risks, but no online service can honestly guarantee that content is never lost.
• We are not promising "forever" in the absolute sense. 30 years is what we can commit to with structural backing. What comes after is our intention, not our guarantee.

How to hold us to this

This page is the public record. It shows which continuity measures exist today and which are still proposed. At present, João Tomé is the only named responsible person; future custodians will be added only after they accept the role publicly. This is not a legal contract, and it must not imply safeguards that have not been built.