Privacy

Your email address and a hash of your password. Whatever you choose to record: profile details, documents, assets, possessions, contacts, beneficiaries and recordings. Session records, so you can be signed in. Nothing is collected that you did not enter.

There is no analytics, no advertising, and no third-party tracking on this site.

Your identity documents — Social Security, driver's licence, passport and national ID numbers — and every uploaded file and recording are encrypted with a key unique to your account, before they are written to disk. That key is itself encrypted by a master key held outside the database.

A copy of the database on its own therefore reveals none of it. Identity numbers are never included in a page; they are decrypted only when you explicitly ask to see one, one field at a time.

Passwords are hashed with Argon2id and are not recoverable. Session tokens are stored hashed, so the session table cannot be used to impersonate anyone.

Stated plainly, because the distinction matters: names, addresses, phone numbers, dates, document titles and the transcripts you type alongside a recording are stored unencrypted. They are displayed and searched constantly, and encrypting them would prevent that.

A transcript contains the same words as the recording it describes. If that matters to you, leave it blank.

You, and only the people you name. A trusted contact sees exactly the categories you tick and nothing else, and only where you have marked an item as visible to trusted contacts. Sharing a document with someone grants them that document, not your account.

An emergency-only contact sees nothing until a request has been made and the seven-day window has passed without your refusal.

Email is used for verification codes, password resets and emergency-access notices. When a delivery provider is configured, the recipient address and message are handled by that provider.

Deleting something moves it to Deleted items, where it can be restored. Deleting it permanently from there removes the record and, for documents and recordings, the encrypted file itself. That cannot be undone.

This instance runs on hardware controlled by its operator, and the data stays on it. Backups, if taken, contain the same encrypted values described above.