Last updated: 26 October 2026
In short: the contents of your vault are encrypted and we cannot read them. We use no tracking and we don’t sell or share your personal information. This policy explains how we handle personal information and the consumer rights available to you under applicable US state privacy laws, including the CCPA/CPRA.
Apex Ventures Tech LLC [Street and number] [City, State ZIP] United States Email: support@ifever.us Phone: [phone number]
Privacy contact: privacy@ifever.us
When you open our website, our hosting provider automatically records technical data in server logs:
We use this to keep the website working and secure, for example to fend off attacks. We delete the log files after [7] days.
Hosting provider: [name, address, server location]. We have a written agreement with them about how they handle your data.
This website does not use cookies for advertising or analytics. If you switch between light and dark theme, we remember your choice in your browser’s local storage. It never leaves your device.
After you sign in, we use a strictly necessary session cookie so you stay signed in. [Add name and lifetime once the app is connected.]
Our fonts are hosted on our own server. Loading the website does not connect to Google or any other font provider.
When you create an account, we collect:
We use this to provide the service you signed up for. Your mobile number is optional.
Documents, passwords and letters in your vault are each encrypted with AES-256-GCM using their own key, and each of those keys is wrapped by a master key held separately from the database. Our staff have no access to the contents. A stolen copy of the database alone does not reveal your documents.
Honest limitation: this is encryption we hold the key to, because the service must be able to deliver your vault when you can no longer act. We do not have a design where only you hold the key and delivery still works. If that matters to you, it is a reasonable reason not to store your most sensitive passwords here.
Your vault may contain sensitive information, for example health information in an advance directive. We only handle it because you choose to store it with us and want it passed to the people you choose. You can withdraw that choice at any time by deleting the contents.
You can add names, email addresses and mobile numbers of people who should receive documents or confirm a release. We use this information only for that purpose.
Please tell these people beforehand. When we first contact them, we tell them who we are, why we are contacting them and where to find this policy. ifever is free for recipients and trusted people. They do not enter into a contract with us. They may contact us at privacy@ifever.us to access, correct or delete the information you provided about them, or to opt out of messages from us.
Your partner’s vault is separate from yours. We do not show you anything stored in your partner’s vault, and we do not show them anything stored in yours.
If you report a death to us, we collect the uploaded proof (for example the death certificate), the details about the person who died, and your name, email address and relationship to that person. We use this only to check the report, inform the trusted people and reach you if we have questions.
We delete the proof once the check is complete, at the latest after [90] days.
We send reminders, confirmation requests and releases by email and text message through service providers: [email provider, location] and [SMS provider, location]. Passwords or vault contents are never put in an email or text message.
Because the phone numbers of your recipients are supplied by you rather than by them, we ask each person directly before we ever text them, and we record when and how they agreed. Anyone can reply STOP or use the link in that message to opt out at any time, and we will tell you if that happens so you can reach them another way. Message and data rates may apply. We do not send marketing messages.
Payments are handled by [payment provider, location]. The provider does not pass your card or account details to us. We keep billing records as required by tax law.
If a payment fails, we do not lock your vault. We then use your contact details to let you know.
We use no analytics or advertising services. We do not sell or share your personal information, and we do not pass it on for direct marketing or for cross-context behavioral advertising.
[Describe where vault data is stored and which providers handle information, with the location and what information.] Our service providers are bound by written agreements that limit them to using your information only to provide their service to us.
We keep your information as long as your account exists. After you cancel, we delete your account and vault after [30] days, unless the law requires us to keep it. After a release, released documents remain available to recipients for [period] and are then deleted. Deletion cannot recall anything already delivered.
Depending on where you live, US state privacy laws such as the CCPA/CPRA give you the right to:
Just email us at privacy@ifever.us. We respond within the time required by applicable law. We will not discriminate against you for exercising these rights. You may use an authorized agent where the law allows.
If you are unhappy with how we handled your information, contact us first. You may also have the right to complain to your state attorney general or applicable regulator.
All connections to our website and app are encrypted with TLS. Vault contents are also encrypted one by one, and passwords and access codes are hashed with scrypt, never stored in readable form. Access attempts are limited.
If a data breach affects your personal information, we will notify affected users and, where required, the relevant regulators without undue delay, as required by applicable state law.
If our service or the law changes, we update this privacy policy. The version published here applies. If we make a material change, we will notify account holders by email before it takes effect.