Privacy Notice

Draft for review (version 2026-10-draft). This notice describes what the software actually does. It must be reviewed against the data-protection laws of the countries where you operate by qualified advisers, and completed with the operator's identity, Data Protection Officer contact and hosting location, before launch.

What we collect

Why we use it

We do not sell personal data or use it for advertising. We do not ask for identity documents, health information or asset details unless needed for a specific step.

Who we share it with

Carefully chosen service providers help us run the service, such as hosting, email delivery and virus checking. They act only on our instructions and under contract. If you buy a plan, our card payment provider handles your payment and card details; we receive only the plan, the amount and whether it was paid, never your card number. If you sign in with Google or Facebook, that company knows you used this service. Recipients receive your will and its files only if it is sent. A small number of SuperAdmin staff can access wills and files for support and investigation; each access is logged. [Operator to list processors and data locations.]

How we protect it

Your information is protected by optional two-step sign-in, encryption of your messages and files when they're stored, encryption on its way to and from your device, virus checks on every upload, encrypted backups and a record of important actions. Our staff can't see your messages or files; access to one specific will is only switched on in exceptional cases, such as your written request or a legal obligation, and every view is recorded. See Security and privacy for details.

Your choices and rights

You can view and correct your information in the app, export your data, and request deletion under Data and privacy. Some audit and security records are kept for a limited period for security and dispute resolution: recent ones in our database, older ones in encrypted archives, until the end of their retention period. [Operator to confirm periods: security records 2 years, audit records 10 years, emails 1 year.]

Contact

[Operator name, address and Data Protection Officer contact.] You can also contact support.