One vault.
Every key is yours.
Your life generates data everywhere — contacts, health, meals, receipts, gifts, tasks, reflections. The IronGlass vault gives it one home that belongs to you, and hands out access only when you say so, only as much as you say, only for as long as you say.
Curated Data Areas,
built on open standards.
The vault isn't a junk drawer. Records are organized into curated Data Areas, each stored in open, durable formats — health records as FHIR, contacts as JSContact, tasks and events as iCalendar — so your data outlives any one app, including ours.
- Contacts
- Health
- Nutrition
- Finances
- Possessions
- Gifts
- Prayer
- Tasks
- Events
- Reflections
- Knowledge
- Work
Every record carries its provenance — where it came from, when, and whether a human or an AI wrote it — and every committed record is yours to export, whenever you want it. More areas (like documents) are on the roadmap.
Nothing sees your vault without a grant.
Apps, services, and AI assistants reach your data one way only: through a grant. Not policy language — an enforced mechanism, with an append-only audit log that records every access, including ours.
- 01
Explicit
Access starts with a consent screen you approve — never a checkbox buried in settings, never a default.
- 02
Scoped
A grant names exactly which areas of your vault it covers, down to individual fields — and an outside app's request is yours to trim before you approve it.
- 03
Time-boxed & revocable
Grants expire, and you can revoke one at any moment — access is cut off in under a minute, and every access up to that moment is on the record.
- 04
Only ever narrows
An app can ask for less over time, never quietly more. Widening access always requires your fresh consent.
Talk to your vault — from the AI you already use.
"Tell Iggy I played tennis this morning." "Tell Iggy I spent four and a half hours on the Carman project today." The Iggy connector lets AI assistants like Claude, ChatGPT, and Gemini read and write your vault under a grant you control — on the terms you set, area by area.
-
Say it once, in passing
A meal, a workout, a receipt, an hour of work on a project or for a client — captured in the sentence you'd have said anyway, and filed as a real record rather than a note you'll have to read again later.
-
You set the terms, area by area
For each kind of data, you decide how an assistant may write: confirm every entry as it happens, hold them in an inbox to review later, or — for the low-stakes things you'd rather not be asked about — let them land directly. Tightening that is free; loosening it always asks your consent again.
-
AI guesses are labeled
When an assistant estimates something — the calories in a meal, the total on a receipt — the record says so, permanently. You can always tell interpreted data from the source.
-
The important things stay app-only
No AI surface can create or widen a grant, or export your vault. High-stakes actions happen only where you're fully in control.
Share with a person.
Or with everyone at once.
The same consent machinery that governs apps governs people. Make a group — your family, a prayer circle, a study — and share a set of records with it in one decision, instead of one decision per person per thing.
-
Nothing lands uninvited
Being shared with doesn't put anything in your vault. You see who shared, and through which group — and taking a copy is your own separate act.
-
What you share stays named
A group share has to name the records it covers. It can't be pointed at a whole area, because a share that quietly grows as you add things is one nobody agreed to.
-
Removing someone is revoking
Take a person off the list and their access ends on their next look — no separate cleanup, nothing left behind that still resolves.
-
It stays live, not copied
What others see reads from your vault each time. Change it and they see the change; end the share and it stops, and says so.
A grill, and the point of all this.
- 01
Someone asks ChatGPT for a maintenance schedule for their grill. Nothing unusual — except they ask it to put the result in their vault.
- 02
Iggy writes it in as a maintenance plan: a real record, in the open format the vault uses for upkeep, sitting alongside the grill's warranty and service history.
- 03
Later, in the IronGlass Portal — a completely separate application — the grill's page shows that plan and offers to follow it. The reminders start arriving.
Nobody integrated anything.
ChatGPT has never heard of the Portal. The Portal has no idea ChatGPT was involved. There is no API between them, no export, no copy of the data in two places to keep in sync.
They both just read and write the same vault — yours — each one only as far as you let it. That is the whole idea, and it already works.
The hubs stand on the vault.
The IronGlass hubs — and any app you choose to trust — are applications over your vault, not owners of it. They see what their grant permits, and nothing else.
Early days
The vault is formally the IronGlass Personal Data Exchange (PDX). It's live and in daily use — and still early, shipping most days, ahead of a full public launch. If that's the kind of thing you like being in on, start here.
Create your vaultQuestions first? info@ironglass.xyz