What we believe, and what follows from it.

The architecture follows the belief.

We believe people are capable of more than the systems they live inside usually ask of them. We believe technology should be a thing that enlarges a person's reach, not a thing that quietly shrinks it. We believe a future worth wanting is one a person can choose, not one that is chosen for them. We believe the capacity to care about other people is not rare, and that most of what stands in its way is design, not nature.

A company that holds these beliefs cannot reasonably keep its users' private data on a single server that the company controls. Not because the company is bad — companies are made of people, and people are mostly fine — but because a single point of control is, by itself, a single point of failure. The architecture has to make the worst case impossible, not just unlikely. So we host everything on a decentralized network. There is no Mervalo server room with your files in it. There is no employee who can be leaned on. There is no acquisition that changes the terms.

A principle, not a feature.

There is a difference between a company that promises not to misuse your data and a company whose architecture makes it impossible to misuse your data. The first is a feature. The second is a principle.

Features can be removed. A company can be acquired, its values can shift, its leadership can change. Promises written into a privacy policy are only as durable as the people who wrote them.

Principles are written into the design. They do not require trust. They require a network. Sapient runs in a personal instance that belongs to you. Your files stay inside that instance — they are not copied, not seen, not profiled, not used to train anything, not sold to anyone under any circumstance. The keys that control your data are held by you. When you choose to delete your instance, the data is gone. Permanently. Not "soft-deleted and recoverable." Not "retained for compliance." Gone.

This is the kind of privacy you do not have to take our word for. You can verify it.

The network is a public good.

Decentralization is not a marketing word at Mervalo. It is a thing we have chosen, and it costs us — the engineering is harder, the operations are more complex, the speed of iteration is slower than it would be if we just rented a few cloud regions and called it done.

We accept the cost because the benefit is yours.

Your instance does not depend on Mervalo continuing to exist. If we shut down tomorrow, your instance continues to run. If a government pressures a single jurisdiction, your data is not in that jurisdiction. If a competitor buys us, the network does not become theirs. The network is a public good we help maintain. It is not ours. It is not yours. It is the field on which we all stand.

This is what we mean when we say the keys are in your hands. Not as a slogan. As a fact you can check.