Skip to content
IronGlass
Personal Data Vault

One vault.
Every key is yours.

Your life generates data everywhere — contacts, health, meals, receipts, gifts, tasks, reflections. The IronGlass vault gives it one home that belongs to you, and hands out access only when you say so, only as much as you say, only for as long as you say.

Iggy, the IronGlass vault guardian, standing beside an open personal data vault
What lives inside

Curated Data Areas,
built on open standards.

The vault isn't a junk drawer. Records are organized into curated Data Areas, each stored in open, durable formats — health records as FHIR, contacts as JSContact, tasks and events as iCalendar — so your data outlives any one app, including ours.

  • Contacts
  • Health
  • Nutrition
  • Finances
  • Possessions
  • Gifts
  • Prayer
  • Tasks
  • Events
  • Reflections
  • Knowledge
  • Work

Every record carries its provenance — where it came from, when, and whether a human or an AI wrote it — and every committed record is yours to export, whenever you want it. More areas (like documents) are on the roadmap.

Iggy, the IronGlass assistant
Meet Iggy

Talk to your vault — from the AI you already use.

"Tell Iggy I played tennis this morning." "Tell Iggy I spent four and a half hours on the Carman project today." The Iggy connector lets AI assistants like Claude, ChatGPT, and Gemini read and write your vault under a grant you control — on the terms you set, area by area.

  • Say it once, in passing

    A meal, a workout, a receipt, an hour of work on a project or for a client — captured in the sentence you'd have said anyway, and filed as a real record rather than a note you'll have to read again later.

  • You set the terms, area by area

    For each kind of data, you decide how an assistant may write: confirm every entry as it happens, hold them in an inbox to review later, or — for the low-stakes things you'd rather not be asked about — let them land directly. Tightening that is free; loosening it always asks your consent again.

  • AI guesses are labeled

    When an assistant estimates something — the calories in a meal, the total on a receipt — the record says so, permanently. You can always tell interpreted data from the source.

  • The important things stay app-only

    No AI surface can create or widen a grant, or export your vault. High-stakes actions happen only where you're fully in control.

People, not just apps

Share with a person.
Or with everyone at once.

The same consent machinery that governs apps governs people. Make a group — your family, a prayer circle, a study — and share a set of records with it in one decision, instead of one decision per person per thing.

  • Nothing lands uninvited

    Being shared with doesn't put anything in your vault. You see who shared, and through which group — and taking a copy is your own separate act.

  • What you share stays named

    A group share has to name the records it covers. It can't be pointed at a whole area, because a share that quietly grows as you add things is one nobody agreed to.

  • Removing someone is revoking

    Take a person off the list and their access ends on their next look — no separate cleanup, nothing left behind that still resolves.

  • It stays live, not copied

    What others see reads from your vault each time. Change it and they see the change; end the share and it stops, and says so.

What that buys you

A grill, and the point of all this.

  1. 01

    Someone asks ChatGPT for a maintenance schedule for their grill. Nothing unusual — except they ask it to put the result in their vault.

  2. 02

    Iggy writes it in as a maintenance plan: a real record, in the open format the vault uses for upkeep, sitting alongside the grill's warranty and service history.

  3. 03

    Later, in the IronGlass Portal — a completely separate application — the grill's page shows that plan and offers to follow it. The reminders start arriving.

Nobody integrated anything.

ChatGPT has never heard of the Portal. The Portal has no idea ChatGPT was involved. There is no API between them, no export, no copy of the data in two places to keep in sync.

They both just read and write the same vault — yours — each one only as far as you let it. That is the whole idea, and it already works.

Vault + applications

The hubs stand on the vault.

The IronGlass hubs — and any app you choose to trust — are applications over your vault, not owners of it. They see what their grant permits, and nothing else.

Early days

The vault is formally the IronGlass Personal Data Exchange (PDX). It's live and in daily use — and still early, shipping most days, ahead of a full public launch. If that's the kind of thing you like being in on, start here.

Create your vault

Questions first? info@ironglass.xyz