Trust & technology
Simple on the outside. Carefully governed underneath.
BambooSnow is designed around an ordinary promise: telling it one thing about your life should not expose everything else.
Private is the default
A personal BambooSnow is distinct from a household or any other shared context. Relationships, membership, participation, and permission are separate records. Sharing can be limited to specific people, one context, the participants in one situation, or a scoped guest link.
Guest links reveal an allowlisted projection
A guest link contains only the situation details intentionally selected for that experience. It does not expose account history, unrelated situations, private memories, provider configuration, or internal execution state. Links can expire, be revoked, and be limited in use.
Consequential actions stop for review
BambooSnow can organize and suggest proactively. Spending money, booking, sending important communications, deleting records, or sharing sensitive information requires a clear review. Internally, state versions, scoped authority, idempotency, and durable results protect those transitions without putting infrastructure language in the consumer interface.
Memory has provenance and scope
Personal, shared-context, relationship, and situation memory stay distinct. Remembered facts carry confidence, timestamps, and source context. A correction supersedes prior knowledge instead of silently rewriting history.
Accounts travel; permissions stay scoped
Authenticated accounts and revocable server-side sessions provide continuity across devices. A person can still exist in BambooSnow without an account. Joining a household never turns another person's private information into household data.