Version 4 · last updated 2026-10-12

What Moi does not do

A record you can trust is defined as much by its refusals as by its features. Each line below names the bar in our doctrine that makes it checkable. None of them is a promise about the future; each describes how Moi behaves today, and the tests that enforce it.

It does not guess about you

The Ask page on your profile answers only from what you published, cites the fact each sentence came from, and refuses the rest. When the record does not hold something, the page says so and passes the question to you. It never fills a gap. (Doctrine 4: every answer cites the owner-supplied source it came from; when retrieval returns nothing the system says it does not know.)

It does not let a model speak for you unasked

No model phrases answers on your page unless you switch it on, per page, and every answer it phrases is labelled as such and checked against your record before anyone sees it. Switching it off is one click and is logged. (Doctrine 4 and Doctrine 5: consent is granular, revocable, and logged.)

It does not train anything on you

Moi trains no model on your record, your questions, or your visitors. When you have switched model phrasing on, the model sees your public record for that one answer and nothing else. (Doctrine 4.)

It does not read you to machines without consent

Which classes of machine reader may read your record is yours to decide, one class at a time. A withdrawn class gets a refusal, not a quieter copy. Every grant and revocation is on your consent log. (Doctrine 5.)

It does not sell reach it cannot deliver

There is no ad network, no paid placement, and no "featured" list. Every number Moi shows you is counted from what actually happened; nothing is estimated or extrapolated. (Doctrine 6: never sell reach we cannot deliver.)

It does not hide the free tier behind a trial

The free plan is a real plan, not a countdown. What it limits is depth, never existence: a free page still answers every question from its record. (Doctrine 7: the free tier is real.)

It does not hold your page hostage

You can leave at any moment with everything, in one file, without paying and without asking a human. Your page is built so it keeps working if Moi does not. (Doctrine 1: the page outlives the company.)

It does not remove people silently

Every enforcement action names the specific element that violated the rules, preserves your data for the appeal window, and can be appealed to a human at /appeal without logging in. The database will not record a suspension without a stated reason. (Doctrine 2: no termination without a stated reason and a human appeal.)

It does not make leaving harder than joining

Deleting your page starts from an email address alone at /delete, with no login, no call, and no retention screen. (Doctrine 3: cancellation is symmetrical with signup.)

It does not keep visitor accounts or memory

A question is text, never a delivery channel. A follow-up conversation is a random token in the visitor's browser, not an identity, and there is no memory across sessions. Visitors cannot be profiled because nothing profiles them.

It does not run anyone else's code on your page

Your page carries no analytics script, no tag manager, no embedded SDK, and no third-party JavaScript of any kind. The only script tag a Moi page serves is the structured-data block that search engines and AI systems read, and a test fails the build if a second one ever appears.

This is not a claim about how carefully we write code, and it is not a security certification. We hold no third-party security audit and will not imply otherwise. It is a claim about surface area, and it is the one kind of safety a small product can actually promise: every third-party script on a page is a standing permission for someone else to change what that page does, at any time, without telling you or the person whose page it is. We do not grant that permission, so there is nothing to revoke and nothing to compromise.

It does not resolve you to someone else's idea of you

Elsewhere in this category a single link is a routing decision. It carries you to whichever destination a company decided is right for you, based on what it inferred about your device, and that company's name is usually one you never learn.

A Moi address does the opposite. It resolves to a record a person wrote, whose every claim names its source and the date they last stood behind it, which they can read in full at /name.json, and which they can withdraw from any class of reader. The address belongs to the person it names. It is not a decision made about them.

That holds for the page's owner. It does not automatically hold for someone else a page happens to mention, and pretending otherwise would be the same silence we refuse elsewhere. If a Moi page names you and the page is not yours, /named shows you exactly what it says, where each claim came from, and the date its owner last stood behind it, and it puts your objection in front of a human. No account, no sign-in.

It does not answer for an address nobody holds

If no one has published a record at a Moi address, that address says so. The page, the data file, the Markdown record, the contact card and the QR code all answer "not found", and so does an address whose owner has deleted their page. None of them returns an empty page that looks like a person, and none returns a page that a search engine could mistake for one.

That matters more than it sounds. An address that answers "yes, here" for everything, live or abandoned, cannot be told apart from a real record by any machine reading it, and it keeps answering for years after the person behind it has gone.

It does not pass a character off as a person

A Moi page can belong to a fictional character, such as an AI influencer, made by the person who owns the page. Every such page says "AI-generated fictional character" at the top, and so does everything that page produces: its search preview, its data file and Markdown record, its contact card, its Ask page and the copy its owner can download. The line is drawn by Moi, not written by the owner, so it cannot be edited out.

The creator may choose not to show their name. The page still has an owner account, and that account answers for it. A page made for a person cannot later be turned into a character page, and a character page cannot become a person.

Where to check

The doctrine itself is in the repository as DOCTRINE.md. The consent model is described at /agents. The terms are at /terms and the privacy notice at /privacy. If any line on this page stops being true, that is a bug, and the test suite is where it will show first.