Encrypted before it leaves the phone
Vault content is encrypted in the app with a key we never see in readable form. What sits on the server is ciphertext. That is not a policy promise — it is how the system is built.
Loading…
Insurance policies, ID cards, deeds, certificates, credentials. The Vault keeps them encrypted on the device, and we cannot open them.
Encrypted on the device
The server holds only ciphertext. We cannot open it.
Approval releases the key
Not just a hidden button.
One recovery code
Held by you, and proven at setup.
Vault content is encrypted in the app with a key we never see in readable form. What sits on the server is ciphertext. That is not a policy promise — it is how the system is built.
When a document needs approval, what the approval releases is the key. A denied request leaves the requester holding ciphertext they cannot read, rather than a hidden button.
Biometrics unlock a key held on that phone. They are not a password substitute, not a way into our servers, and the biometric data never leaves your device.
When you first set up the Vault, the app shows a recovery code once. You have to type it back to prove it was really saved — not tick a box saying you copied it.
A member can nominate another member to request emergency access to documents the household could already see. The request is visible when it is made, the waiting period is one you choose, and the household owner can stop it at any point within that period.
A document you mark private opens only with your password and your recovery code. Losing both means the content is gone, and we say so on the setup screen rather than in a footnote. Emergency access does not reach a private document either — only ones already open to the household.
Policies and certificates carry their expiry date, and a reminder arrives before it passes. The most sensitive ones live as vault items.
Save the recovery code, then type it back to prove it.
Policies, ID cards and deeds are encrypted before they leave the phone.
Private, open to the household or to named people — and optionally behind your approval.
Start with the policy or the ID card that has been sitting in your photo gallery.
Follow the launch