How we protect your data

LinkedWithin holds some of the most personal information you have, so here is exactly what protects it today, and where the limits are.

What is in place today

• Encrypted in transit. Every connection between your device and LinkedWithin uses TLS.
• Within Drive files are encrypted at rest, kept in a private storage bucket under a key unique to your account, and reachable only through links that expire within 15 minutes.
• Our database sits on a private network with no public access.
• Keys and secrets live in a managed vault (AWS Secrets Manager) with managed encryption keys. Threat detection (GuardDuty) and audit logging (CloudTrail) are switched on.
• Passwords are stored only as a one-way hash. We cannot read them.
• Access to production systems is limited to the people who run LinkedWithin, and every administrative action on an account is written to an append-only audit log.
• No advertising, no data brokers, no tracking across other sites or apps, and we never sell your data.
• No AI training on your information, by us or by the providers behind AI Within.

What you control

• See and delete what AI Within remembers, any time.
• Delete any conversation, file, entry or Family Profile, and it leaves the live service immediately.
• Close your account whenever you like. You have 30 days to change your mind; after that, everything is permanently deleted within 7 days.

The honest limits

No system is perfectly secure. We do not yet offer two-factor authentication, so please use a strong, unique password or sign in with Google or Apple. If you ever suspect someone else has used your account, email legal@linkedwithin.com straight away.