Privacy Policy
Last updated: draft — pending legal review
Safe Amanat helps you record where your assets are kept so your family can find them if you're gone. This policy explains what we hold, why, how it's protected, and the control you have over it.
1. What we collect
To run your vault we keep a small amount of account information (your name as on your government ID, mobile number, email, country, and — if you provide them — date of birth and address), your encrypted records, your legacy-contact (nominee) details, any recorded video or audio messages you add, and your subscription and payment status.
We never store the actual details of your assets in readable form. Bank names, policy or account numbers, amounts and categories all live inside an encrypted envelope — there are no plain-text asset columns in our database. We do not store any password (you unlock with your fingerprint, face, or device PIN).
2. How your data is protected
Every record is encrypted with a key tied to your account, on your device, before it reaches us. The sensitive contents are never written to our database in readable form. Only two tightly-controlled services can ever decrypt your data, and only under strict conditions — re-enrolling a new device you approve, or a verified family claim after your death (which requires a death certificate to be verified, two separate approvers, a notice to you, and a cancellable waiting period). All data is transmitted over encrypted connections.
3. How we use your information
We use your information only to provide the service: to secure your vault, remind you to keep it up to date, run the Life Check-in, and release your information to your family through a verified claim. We do not sell your data, and we do not use it for advertising.
4. Who we share data with
We share the minimum necessary with the service providers that make the app work:
- Microsoft Azure — secure hosting, database, and encrypted storage.
- WhatsApp / Meta — to deliver one-time codes and notifications (your phone number and message content).
- Google Firebase — to deliver push notifications (a device token).
- PhonePe & PayPal — to process subscription payments. Indian accounts are processed via PhonePe; international accounts are processed via PayPal. Card, bank, or UPI details are handled entirely by the payment gateway; we never see or store them.
- Our email provider — to send one-time codes and account emails.
We do not otherwise sell, rent, or trade your personal information.
5. Where your data lives & how long we keep it
Your data is stored in India (Microsoft Azure, Central India region). We keep it for as long as your account is active. If you stop using the service, your records are retained for a limited period (during which you can export or return), and then deleted after advance notice. Verified-claim disclosures and any recorded evidence expire after a set window.
6. Your rights
You can view, update, export, and delete your data at any time. When you ask us to delete your account, your records are permanently erased — not just hidden. You may withdraw consent, and you may raise a complaint with our grievance officer (below) or the relevant data-protection authority.
7. Children
Safe Amanat is intended for adults (18+). We do not knowingly collect data from children.
8. Changes to this policy
We may update this policy from time to time. We'll notify you of significant changes and update the date at the top.
9. Contact & grievances
Questions about your privacy, or to exercise a right? Write to us at privacy@safeamanat.com and we'll help. A named Grievance / Data Protection Officer and response timeline will be listed here before launch.