Know what you are keeping.
Privacy & security
Your records. Clear boundaries.
Private test / October 11, 2026. Use fictional information until hosted verification and release review are complete.
What is stored
Record content is encrypted in your browser before storage. The device edition keeps that encrypted ledger in this browser. The online edition uploads it to the service database.
Online account identity, revisions, dates and request counters are not end-to-end encrypted. Family permissions also store participant names, emails, status and invitation-token hashes outside the encrypted records. Hosting and sign-in providers process technical request and account information.
There are no bank or wallet connections, live balance feeds, AI uploads or advertising trackers. Check-in reminders and release notices are email only, and they never include record contents. A legacy release is a separate choice from an immediate family share.
Your keys stay with you
Your vault passphrase is separate from your online sign-in. Passphrases and recovery keys are not sent to the service. Keep your recovery key separate from encrypted backups. Losing both the passphrase and recovery key makes decryption impossible; support cannot reset them to recover your records.
Encryption does not protect an unlocked ledger on a compromised device or against malicious code served by the application. The view locks after ten minutes of inactivity. Keep account passwords, private keys, seed phrases and authenticator secrets elsewhere.
Sharing is a separate decision
Only the records you select go into a family snapshot, including their notes and reference amounts. The snapshot has its own passphrase and recovery key. Verify the claimant through a trusted channel before approving them.
Approval makes the copy available immediately to that account; they still need its key. Future edits are not shared automatically. Revocation blocks future downloads, but cannot erase copies already received. Plaintext exports are unencrypted. Nothing here transfers assets or replaces a will.
Backups, changes & deletion
Download an encrypted backup and store its key separately. Test recovery before depending on it. Changing a passphrase or recovery key does not invalidate older backups.
Deleting your ledger removes it from its current application storage and removes its outgoing online family grants. It does not erase exported copies, older plaintext browser records, an online login account, or the hosting provider's backups and logs. Online request counters are separate from ledger deletion.
About this private test
The Site owner manages access to this private test. Contact the person who invited you for access or deletion help. Application sharing does not grant access through the Site's separate audience policy.
Production support, service retention periods and hosting-provider backup deletion procedures have not been established for this test. Do not use it as your only record or enter real sensitive information yet.