Your memory, after you.

What Memory Donation is

If you’ve used Rill long enough, your corpus becomes part of how you think — a long quiet record of your decisions, your interests, your turning points. Memory Donation is a place to write down what you’d want done with that record when you’re no longer here.

You designate beneficiaries. You pick a disposition: sealed, ask the persona only, or full export. You can change any of it any time. That’s it — and that’s the point. The hardest part of cognitive estate isn’t the technology. It’s deciding what you’d want, and writing it down somewhere your family can find it.

What we store and what we don’t

• The names, email addresses, and (optional) relationship of the people you designate.
• The disposition you picked — private, recall-only, or full export.
• An inactivity window — the length of dormancy that flags your account for review (not for transfer).
• A best-effort timestamp of the last time you signed in. Used only to detect inactivity. No location, no device fingerprint.

We don’t notify your designated beneficiaries until you ask us to. We don’t share any of this with third parties. Removing a beneficiary deletes the row immediately.

How a beneficiary actually gets access

This is the section where most products would promise something magical. We won’t. The honest answer is that Rill — like every other digital service — has no legal authority to declare anyone deceased, and we don’t want it.

For a beneficiary to actually receive what you designated here, two things need to happen. First, you need to mention Rill (and ideally this designation) in your will, your trust, or whatever estate document your jurisdiction recognises. Second, your executor or family contacts us — typically with a death certificate — and we manually verify before any handoff.

The inactivity window in your settings is a backstop, not a trigger. If we don’t see you for the period you specified, we flag your account internally for review. We never move data based on inactivity alone — that would be a horrible failure mode (people travel, get sick, take sabbaticals). The review is human, and we err on the side of doing nothing.

Why this matters

Your captured corpus is part of your record. Not the record your phone holds — those photos get inherited, sort of, in whatever shape Apple or Google permits. The cognitive record: your decisions, your evolving positions, the slow turns of your thinking. Without a deliberate place to make your wishes known, it usually defaults to “sealed” when an account goes dark — because that’s what every product’s legal team picks when no one asks the question.

We think you should get to ask the question, and answer it yourself. Sealing is one valid answer. Letting your daughter ask your AI persona what you were thinking about the week before she was born is another. Sharing the full archive with a co-founder so your work continues is another. None of them is right or wrong — but none of them happens by default.

So this surface exists to make the choice yours. Quietly, without drama. The same way the rest of Rill works.