Koda asks people for photographs of their children, the sound of a grandfather's voice and things they have never written down. That earns hard questions, so here are the answers — including the ones that are still 'not yet'.
Yes. A Space is never listed, never indexed and never public. It can only be reached by the Keeper or by someone holding the invitation link or code.
Whoever the Keeper lets in. Before a Space is opened, nobody at all — a Reserved Space cannot receive a contribution even if the link is shared.
The Story of that one Space. Nothing about your other Spaces, and nothing about your account.
With named infrastructure providers under contract. Region and provider list are being finalised before launch.
The design is encryption in transit and at rest, restricted and recorded production access, and per-Space access rules enforced in the database rather than in the interface. These controls are being implemented and independently verified before launch.
A Space or account you delete has a 30-day recovery period, then is permanently removed from the live service. Deleted content may persist temporarily in operational backups; the maximum backup period is not yet set.
Koda keeps the story. You always keep your memories. A Memory Keeper will be able to download individual memories and request a complete Space archive, separately from an account-level copy of the personal data Koda holds. Until that product flow is live, ask through Help — we will respond to the data request and explain what can be provided.
Ask through Help and it reaches a person, not a form that goes nowhere. The published privacy address is production configuration and is not set yet.
Koda holds no security certification today. We will not imply SOC 2, ISO 27001 or any audit we have not passed. Where something is planned, it says so.
Technical review needed