1. Information we collect
Account information: the phone number or email address you use to sign in. These are stored in two separate columns — an index hash used for lookup at sign-in, and ciphertext used to restore the value when necessary — each protected by an independent key.
Asset records: the asset categories, platforms, valuations and handling instructions you choose to enter, along with any sensitive fields such as account hints. Raw text from conversational entry is not retained by default.
Usage and security information: sign-in times, session records, and the audit logs we need (which record who viewed which category of field and when — never the field values themselves).
2. How we use this information
To provide the service to you: generating your asset inventory, calculating subscription reminders, and notifying the family members you have authorised if you are inactive for a long time.
To keep your account and data secure: detecting unusual sign-ins and preventing duplicate sign-ups or abuse from the same device or phone number.
To improve the product: measuring feature usage in an aggregated, de-identified form.
We do not sell or rent your asset details, and we never use them for advertising unrelated to the product.
3. How we protect this information
Sensitive fields are stored using AES-256-GCM encryption, with a unique initialisation vector per row and a recorded key version so keys can be rotated safely.
Fields such as phone numbers, email addresses and account hints are always masked in lists, on the family view and in exports — they are never displayed in full.
Every view of sensitive information is written to the audit log, and the ability to decrypt is confined to a very small number of code paths.
4. Sharing with third parties
Large language model parsing: when you use conversational entry, the content is sent to a third-party LLM service for structured parsing. Before it leaves our systems, sensitive fragments such as phone numbers, national ID numbers, bank card numbers, private keys and seed phrases are replaced with placeholders.
Notification services: SMS and email are delivered by third-party providers. Reminder content does not include sensitive information such as full phone numbers.
Infrastructure: our databases, object storage and servers are hosted with cloud providers, used only to the minimum extent necessary.
Except where required by law or where you have given explicit consent, we do not provide your personal information to any other third party.
5. Retention and deletion
Asset records are kept until you delete your account; you can delete a single record or your entire account at any time in settings.
After your account is deleted, the associated asset records, encrypted sensitive fields and invitation relationships are erased or anonymised; audit and security logs that we are required to retain by law are removed after the necessary period.
6. Your rights
Depending on where you live, you may have rights under laws such as the GDPR or the CCPA, including the right to access, correct, export or delete your asset records, to withdraw family authorisations at any time, and to request closure of your account.
To exercise any of these rights, contact us using the details at the end of this page. You also have the right to lodge a complaint with your local data protection authority.
7. Children
The service is intended for adults. We do not knowingly collect personal information from children; if we become aware of such a case, we will delete it as soon as possible.
8. Changes to this policy
If we make material changes to this policy, we will post a prominent notice on our website and, where necessary, let you know by in-app notification or SMS. Continuing to use the service means you accept the updated policy.
9. Contact us
If you have any questions about this policy, please contact privacy@example.com (placeholder, to be replaced).