How your data is handled

Every system KeepWiz uses, what it sees, and what it can never see. Below is a plain-English summary — the full legal privacy notice is here. Current as at 18 July 2026; this is updated before any provider changes.

How your data is protected

Every connection is encrypted (TLS 1.3), so nothing travels readable. Your records are stored scrambled (AES-256 encryption), so they’re unreadable without the keys. The Vault and your private wishes can be locked to your face or fingerprint using your phone’s own security. And your records are held on Australian servers, walled off so only your household can see them.

Tap any provider to see the detail:

KeepWiz itselfThe application, and the people who run it.

What it sees: Day to day: overall counts and system health — how many households exist, whether anything is waiting on support. The screens we use to run KeepWiz are built so the contents of your household never appear in them. During beta support, a named team member can be given temporary access — only with your explicit permission, it's visible to you, and you can end it at any time.
What it can never see: Your Green Box and your intentions. Only you — the owner — can ever see them. No one else, full stop. The one exception: if you die or are incapacitated, the person you've nominated can see them. KeepWiz also never sees your Google Drive beyond its own folder, and never stores any password, PIN or seed phrase — we refuse to hold them, so they can't be lost from here.
What this means for you: Every change to KeepWiz must pass 14 automatic checks before it goes live — including proof that one household can never see another's records, and that your private wishes stay private even from the household owner. Every important action is also recorded in a permanent history that nobody — including us — can edit or erase.
What you should know: What you should know: no company can promise perfection. What we can promise is the design above — separation between households, private wishes readable only by you, a permanent record of every important action, and nothing here worth stealing that you didn't choose to store.

Google — sign-in, and your own DriveYou sign in with Google; your documents live in a KeepWiz folder inside your own Google Drive.

What it sees: Google already knows you — KeepWiz adds only the files it creates in its own folder. We use the narrowest Drive permission Google offers: KeepWiz can only touch files KeepWiz created.
What it can never see: The rest of your Drive, your Gmail, or your photos. The permission we request makes that impossible, not just against the rules.
What this means for you: Ownership. Your documents belong to your Google account, not to us — if you ever cancel KeepWiz, every file is still yours, sitting in your own Drive.
What you should know: What you should know: your Google account is the front door — protect it with Google's 2-step verification. And Google needs to be up and running for your files to open: if Google ever has an outage, your data still exists and KeepWiz still works — you just can't open the actual files (photos, statements) until Google is back.

Database & sign-in security — Supabase (Sydney, Australia)Holds KeepWiz's records: people, bills, assets, policies, and the permanent history of actions.

What it sees: Your household's records, stored scrambled (encrypted) so they're unreadable without the keys, on servers in Sydney.
What it can never see: Your documents (those stay in your Drive) or your passwords (none exist anywhere in KeepWiz).
What this means for you: Your records stay in Australia, and every household is walled off from every other at the deepest level — so even a mistake in a screen couldn't show your records to another household.
What you should know: What you should know: any database can be broken into if its keys are stolen. Ours are rotated, the most powerful key never travels to your browser, and every sensitive action is permanently recorded — so anything unusual leaves a trail.

Claude — the AI assistantPowers the assistant: reads documents you snap, chats with you, and can run small web searches.

What it sees: Only when you use those features: the text of a snapped document, what you type or say to the assistant, and a compact summary of your records so it can answer questions.
What it can never see: Anything when you're not using the assistant. Never your passwords — none exist. Your data is not used to train AI models.
What this means for you: The assistant only ever drafts suggestions into your Review inbox — it cannot save a record by itself. You approve everything. Processing happens in the United States, which is disclosed in the privacy notice.
What you should know: What you should know: like any AI service, it could in theory be breached while processing text. That's why AI reading is something you trigger each time, why identity documents stay in your Drive, and why web lookups send only your question — never your records.

Vercel — serving the appDelivers KeepWiz's pages to your screen over encrypted connections.

What it sees: Requests passing through, briefly — like the postal service seeing an envelope.
What it can never see: It keeps no copy of your content.
What this means for you: It keeps KeepWiz fast wherever you are, and lets security fixes reach every user within minutes of being ready.
What you should know: What you should know: no long-term data is stored at this layer — the important word is 'passing through'.

Documenso — e-signingSends documents for electronic signature (currently the beta agreement).

What it sees: The document being signed, and the signer's name and email.
What it can never see: Any household record — it's connected to nothing else.
What this means for you: Signing should be simple and produce a proper signed certificate, without giving the signing service any view into your records.
What you should know: What you should know: the only data ever at this provider is a document you intended to sign.

Resend — email notificationsSends KeepWiz's notification emails — for example, alerting the KeepWiz team when a support question needs a human.

What it sees: The recipient's email address and the notice text — which we keep deliberately empty of substance: "a support question needs you" and a link, never the question itself, never household data.
What it can never see: Any household record. It's a one-way outbox connected to nothing else.
What this means for you: So a support question never sits unseen, and invitations arrive promptly — without the email service learning anything private.
What you should know: What you should know: any email provider can read what passes through it — which is exactly why our notices carry no substance. The details stay behind your login.

Your device — voice, Face ID, fingerprint, and offline readingVoice chat, the locks on the Vault, your intentions and exports — and a saved copy of your household for reading when there's no internet.

What it sees: Everything — it's your device. Your phone's own security handles Face ID and fingerprints; voice is turned into text by the device itself. So you can read your KeepWiz on a plane or out of reception, the device also keeps a saved copy of your household records, refreshed whenever you're online.
What it can never see: — KeepWiz receives only the text of what you said, and a yes/no from the lock check. No recording and nothing biometric ever reaches us. There is nothing biometric on our side to leak. The saved copy never includes your intentions — those stay behind their own lock, online only — and never includes your documents' files, which stay in your own Drive.
What this means for you: The strongest lock available is the one already in your hand: a stolen photo or recording cannot pass your phone's Face ID. The saved copy shelters behind that same lock — your device's passcode, face or fingerprint.
What you should know: What you should know: a device someone else can unlock is a device that can open your KeepWiz — including the saved copy. Use a passcode; if you lose a device, remove its access in Settings. You can also remove the saved copy from any device yourself, any time, from the offline page — and signing out removes it automatically.

Referral partners — only when you askIf you ask KeepWiz for an introduction to a professional (a broker, lawyer, accountant), the named partner you approve receives a one-off pack.

What it sees: Only the sections you tick, once, after you've seen their name, their business, and — in plain words — whether KeepWiz is paid for the introduction.
What it can never see: Anything you don't tick. It's one-way: you package up your information and send it. No standing feed, no list-selling, and a partner never gains access to your account. Introductions never happen unprompted.
What this means for you: So your details don't need retyping at every professional's desk — you send exactly what's needed, when you choose.
What you should know: What you should know: once any professional holds your pack, it's governed by their obligations — true of any document you hand anyone. Every introduction is recorded permanently in your history, including exactly what was shared.

A linked practice — only if you link oneSome professionals provide KeepWiz to their clients. If you choose to link your household to their practice (with a code they give you), their name appears on your home screen and your export-pack covers, and their roster fills the referral desk.

What it sees: Your household's name, whether it's active, and the packs you explicitly choose to send them. Nothing else — ever.
What it can never see: Inside your household. No records, no amounts, no documents, no counts, no progress. Linking is recorded in your history and you can unlink any time in Settings — they see nothing new from that moment.
What this means for you: So a professional you already trust can provide the app without becoming its landlord. Your records stay yours, wherever the introduction came from.
What you should know: What you should know: packs you send a practice are governed by their obligations, same as any professional. The link never gives them a way into your account.

All legal text is draft pending professional legal review while KeepWiz is in beta. Spotted something we should explain better? Tell us: aarongreffenius@gmail.com.