Only your family can open your documents

How it works

• Encrypted before it leaves your phone. Each document gets its own key; each page photo its own key too. They're encrypted with AES-256 on the phone, and only the encrypted copy is uploaded.
• Keys stay with your family. Each person's documents are locked with that person's key. Phones that may see everyone hold your family's vault key; someone you've given access to only some people gets only those people's keys.
• You let each device in. A new phone or browser shows a six-digit code. Someone already in compares it and approves it — so a device can't be slipped in without you knowing.
• A recovery key for emergencies. If every phone is lost, your recovery key gets you back in. We never see it, so keep it safe: without it and without a phone, encrypted documents can't be recovered — by you or by us.
• Lost a phone? Remove it, and replace all the keys in one step. Devices still let in get new keys; the lost one gets nothing more.

What we can and can't see

Only when you ask

A few things need a document to be readable for a moment. Each happens only when you choose it, over an encrypted connection, and nothing is kept:

• Reading a scan with AI sends its pages to our AI service to read the details. Prefer not to? Read them on your phone instead, or type them in.
• Making a PDF sends the chosen pages to be laid out, then they're gone.
• The assistant sees only what documents you have and when they expire — unless you let it read their details for that conversation.
• Emailing or WhatsApp-ing a document in: email and messages to a business aren't end-to-end encrypted to us, so they pass through email services or WhatsApp (Meta) readable. We encrypt it the moment it arrives. Adding documents in the app, or on the web from a browser you've let in, avoids this.

Emergency access

You can choose someone you trust to reach your family's documents if something happens to you. They ask for access; you're told straight away and every day after, and can say no. If you don't, they get read-only access to the people you chose when the waiting period you set ends, and you can take it back any time. With end-to-end encryption on, they see what you have and when it expires — opening the documents needs your recovery key, which you can leave with them.

Sharing

A share link to an encrypted document carries its own key at the end of the link — the part browsers never send to a server. The page decrypts the document in the recipient's browser. Links can have a password, an expiry and a watermark, and you can revoke them any time.

Even without end-to-end encryption

• Everything travels over HTTPS, and the app only trusts the certificate authorities our servers use.
• Document photos and sensitive details are encrypted on our servers, and on your phone.
• Our support staff can see that a document exists and when it expires — never its contents.
• App lock with a PIN or biometrics, two-step sign-in, screenshot blocking and an activity log are built in.

Honest limits

• No system is impossible to break into. End-to-end encryption means a break-in at Remindon wouldn't expose your documents — but a family member's unlocked phone would.
• The web portal and share pages decrypt in your browser using code our servers send. The apps don't depend on that.
• A device you remove keeps anything it had already downloaded.
• The note you leave an emergency contact is encrypted on our servers but not end-to-end, so that it can be given to them.
• Backups made before you turned encryption on still hold the older copies until they expire.