What we protect, and what we don't

The ‘Ask Torivela’ assistant is off by default. If you switch it on, we send only your question and the last few messages of that conversation to an external AI service (via Lovable AI). We first remove email addresses, phone numbers, account numbers, codes and links. We don't store the content; we only count the number of questions. The assistant cannot see your requests, contacts or pairings.

The assistant is fully separate from the security check: it has no access to requests, keys or pairings and cannot approve anything.

Every request gets a unique, unpredictable identifier and expires after 5 minutes. It can only be answered once.

Your contact confirms Yes or No with a passkey on their own device, with mandatory user verification (fingerprint, face or PIN).

The server checks that the confirmation belongs to exactly this request and this choice, to our website, and to a passkey that has not been revoked.

A contact is only trusted once you have both compared the safety words and confirmed with your passkey.

It does not prove who called you, who owns a WhatsApp account or that someone is safe.

A passkey proves the right device was used, but your phone does not display the request text itself. If our website or your device is hacked, someone could show different text from what is being confirmed.

Someone under pressure can still say Yes.

When in doubt, even after a Yes: call back yourself on a number you already knew.

Report it in Settings. Your passkeys are revoked, all your links are paused and you can only add a new passkey after 24 hours. You then link each contact again in person.

A new password by email never automatically restores your trusted contacts.

Family members see each other's names. A request is only visible to the person asking and the recipient.

Administrators see counts and family names, but no passkeys or request texts, and cannot confirm or link anything on your behalf. Every administrator action is logged.

Emails and notifications never contain the content of a request.

A separate, trusted app or hardware that displays and signs the exact text itself, an independent security test and legal review. Until then, Torivela remains a test version.