Loomkeepers
The people you choose to receive your folders when the time comes. Pick one or more per folder — everything inside goes to those Loomkeepers.
Choose your Loomkeepers
Loomkeeper is the private vault for the wills, deeds, accounts and memories you want delivered to your loved ones — exactly when, and to whom, you decide.
Loomkeeper splits your digital legacy into three clear pieces. Together, they make sure nothing important is lost or sent to the wrong person.
The people you choose to receive your folders when the time comes. Pick one or more per folder — everything inside goes to those Loomkeepers.
Choose your LoomkeepersOne-way cold storage for documents, photos, login credentials, wills and anything else you'd hate to lose. Organise into folders, set who inherits each one.
Explore the VaultRecord video, audio or written messages and choose exactly when they're delivered — on a specific date, an anniversary, or a year after you're gone.
Schedule a messageUpload once, organise into colour-coded folders, and forget about it. Files are written once, encrypted on your device, and held in a hardened storage region you choose.
Cloud storage is built for sharing, indexing and constant access. A vault is the opposite — encrypted before it leaves your device, sealed in cold storage, and unreachable by any service, scraper or AI agent. Including ours.
Files are encrypted on your device using industry-standard cryptography and held behind multiple isolated layers of protection. There is no single system an attacker can break to reach them.
No public link, no shareable preview, no API endpoint. There’s no public surface for scrapers to discover or reach.
Your files are ciphertext to us. They can’t be parsed, fed into a model, or used to improve any service — ours or anyone else’s.
The vault is write-once. Even with stolen credentials, an attacker can’t pull files out — there’s no download endpoint to abuse.
Loomkeepers receive your digital assets. Emergency contacts confirm when the time has come. Both work quietly in the background until they're needed.
Assign different folders to different people. Update the list any time — nothing is sent until your emergency contacts confirm.
Trusted contacts vote on a death inquiry before anything is released. Multi-signature consent prevents accidental or premature handover.
From silence to handover · designed to be slow on purpose.
Payment fails and we can’t reach you, or an emergency contact reports your passing.
We try to reach you several times by email. A single click — any time — ends the inquiry.
Your emergency contacts confirm. A sign of life still stops it instantly, even mid-vote.
Your folders reach the Loomkeepers you chose. Each person sees only what you assigned them.
Record video, voice or written messages for the people you love — and choose precisely when each one arrives. Birthdays, anniversaries, milestones, or simply "a year from now."
Send on an exact day — a birthday, a wedding anniversary, the year a child turns 18. Not sent if you're still alive.
Schedule"Their birthday, the year after I'm gone." Loomkeeper handles the timing — you focus on the message.
ScheduleSix months, one year, five years after you're gone. Perfect for messages that should land after the initial grief.
ScheduleLoomkeeper is engineered to be paranoid. Your files are encrypted before they leave your device, stored in a cold one-way vault, and only ever released after multi-party confirmation.
Files are encrypted in your browser with AES-256-GCM before upload, so what arrives on our servers is ciphertext we can’t tamper with. Decryption keys are wrapped with an account-derived key and stored encrypted at rest — released only after the multi-party inquiry concludes.
Nothing is unlocked until your emergency contacts confirm.
Pick where your files live before you upload. US-incorporated company; your data stays in the region you choose.
Designed for things you set once — wills, deeds, credentials, photos. Not a password manager. Not a sync tool.
Your Vault is a subscription — keep storing as long as you need it. Afterlife Messages are a standalone service, billed once per message. No subscription required for either to work alongside the other.
Encrypted cold storage for your digital legacy. Start free, upgrade when you need more room.
A first look — plenty for a small handover.
For anyone who takes their legacy seriously.
No subscription needed. Pay once per scheduled message — it sits encrypted until its delivery rule fires, then it’s sent.
If you can't find what you're looking for, our support team replies within a day.
Loomkeeper is a blend of heirloom and keeper — the people you choose to receive and look after your digital inheritance. You can assign different Loomkeepers to different folders, files or messages, so each thing reaches exactly the right person.
We recommend keeping the roles separate — it’s best not to set the same person as both a Loomkeeper and an emergency contact. Emergency contacts decide whether your inheritance is released; Loomkeepers are the ones who receive it. Keeping those circles distinct preserves the multi-party check that protects you.
People you trust to confirm your passing when the time comes. We recommend adding at least 2–3 contacts — they need to sign up so we have their details on file, but that’s it. We will not contact them until it’s actually required. No onboarding emails, no marketing, no nudges, no “just checking in” messages. They live quietly in your account until the day they’re needed.
They become involved in two situations: (1) we reach out to them if we suspect you may have passed away and need to start a death inquiry, or (2) they log in to the application themselves to report you as deceased, which initiates an inquiry. Either way, the inquiry requires multiple confirmations before anything is released — one person can’t act alone.
A death inquiry can be initiated in one of two ways:
The inquiry flow. First, we try to reach you by email several times and give you a 60-day window to confirm you’re alive — one click is enough. If we hear nothing during those 60 days, we then notify your emergency contacts and open a 7-day vote. At the end of the vote, the inquiry concludes that you’re either alive or deceased.
A sign of life ends the inquiry instantly. At any point during the inquiry — including during the emergency-contact vote — if we receive a sign of life from you, the entire process is stopped immediately and your account returns to normal.
A one-way cold storage vault for your digital assets — documents, photos, account credentials, anything you’d hate to lose. Files are encrypted on your device before upload, stored in a region you choose, and cannot be edited or downloaded after upload (so they can’t be tampered with).
The Vault is for assets that rarely change. It’s a vault, not a hard drive — built for wills, deeds, photos, letters, the master password to your password manager: things you set once and want kept safely until they’re needed. If something changes weekly, store it somewhere else.
Updating an asset means deleting the previous version and uploading a new one — there’s no in-place edit. That’s deliberate: it’s what makes the archive tamper-resistant.
Record a video, voice note or written message, choose a single recipient, then pick one of three delivery rules:
Messages are encrypted at rest and only released after your emergency contacts confirm. Recipients can watch or read the message in the browser and download a copy to their device. The message is automatically deleted from our servers 30 days after delivery.
Your files are encrypted in your browser with AES-256-GCM before they leave you, so what arrives on our servers is ciphertext we can’t tamper with. The decryption keys are wrapped with an account-derived key and stored encrypted at rest — only released when the multi-party inquiry concludes, never browsed, indexed or previewed in the meantime.
We’re transparent about why this isn’t a zero-knowledge model. If the only person who could ever decrypt your files were you, your files would vanish with you — which defeats the entire purpose of a digital inheritance product. Instead, the key sits behind a multi-party process none of us controls unilaterally: a 60-day silence window, then a 7-day vote by your emergency contacts, before anything is released.
Your Loomkeepers don’t even know they’ve been named — we never notify them, contact them, or hint at their role until your digital inheritance is actually released. Until that day, they have no idea you’ve chosen them.
Set up your vault in under five minutes. Free to start — no card required.