How your data is handled

How KeepWiz helps keep your information secure

Kept separate. Shared by choice.

Your documents stay in your own storage. You choose who in your household sees what. And KeepWiz keeps a log of who opened anything sensitive, so nothing happens quietly.

You can sign in with a passkey instead of a password.

Every system KeepWiz uses, what it sees, and what it can never see. Below is a plain-English summary — the full legal privacy notice is here. Current as at 22 August 2026; this is updated before any provider changes.

How your data is protected

Every connection is encrypted (TLS 1.3), so nothing travels readable. Your records are stored scrambled (AES-256 encryption), so they’re unreadable without the keys. The Vault and your private wishes can be locked to your face or fingerprint using your phone’s own security. And your records are held on Australian servers, walled off so only your household can see them.

Backups are real and tested: our most recent full backup-and-restore drill ran successfully on 22 August 2026 — every record exported, reloaded into a separate server, and verified — and we run these drills on a schedule, not just once.

Tap any provider to see the detail:

KeepWiz itselfThe application, and the people who run it.

What it sees: Day to day: overall counts and system health — how many households exist, whether anything is waiting on support. The screens we use to run KeepWiz are built so the contents of your household never appear in them. During beta support, a named team member can be given temporary access — only with your explicit permission, it's visible to you, and you can end it at any time.
What it can never see: Your Green Box and your intentions. Only you — the owner — can ever see them. No one else, full stop. The one exception: if you die or are incapacitated, the person you've nominated can see them. KeepWiz also never sees your connected storage beyond its own folder, and never stores any password, PIN or seed phrase — we refuse to hold them, so they can't be lost from here.
What this means for you: Every change to KeepWiz must pass 14 automatic checks before it goes live — including proof that one household can never see another's records, and that your private wishes stay private even from the household owner. Every important action is also recorded in a permanent history that nobody — including us — can edit or erase.
What you should know: What you should know: no company can promise perfection. What we can promise is the design above — separation between households, private wishes readable only by you, a permanent record of every important action, and nothing here worth stealing that you didn't choose to store.

Your own cloud storage — Google Drive, Microsoft OneDrive or DropboxYour documents live in a KeepWiz folder inside the storage account you choose — yours, not ours. You pick the provider when you connect, and you can connect more than one.

What it sees: Only the files KeepWiz puts there. We ask each provider for the narrowest permission it offers — KeepWiz can touch the files KeepWiz created, and nothing else.
What it can never see: The rest of that account — your other folders, your email, your photos. The permission we request makes that impossible, not merely against the rules.
What this means for you: Ownership. Your documents belong to your storage account, not to us. If you ever stop using KeepWiz, every file is still sitting where it always was. You can also download your records to your own computer at any time, so a copy never depends on us or on any provider being available.
What you should know: What you should know: whichever provider you choose becomes the front door to your documents — protect that account with its own two-step verification. That provider also needs to be running for the files themselves to open: during an outage your records still exist and KeepWiz still works, you just can't open the documents until it's back. Downloading a copy to your own computer is the answer to that, and it's always available.

Signing in — Google, Microsoft, or a code we email youProving it's you. Any email address works; you choose how you get in.

What it sees: Whichever provider you sign in with knows that you signed in to KeepWiz, as it would for any service. A one-time email code involves no third-party account at all.
What it can never see: Your household's records. Sign-in proves who you are and nothing more.
What this means for you: Nobody should need a particular company's account to organise their own household — so we stopped requiring one.
What you should know: What you should know: if you sign in with Google or Microsoft, that account is the key to KeepWiz — protect it with their two-step verification. Adding a passkey (Face ID or fingerprint) in Settings puts a second lock on the Vault, your private wishes and exports.

Database & sign-in security — Supabase (Sydney, Australia)Holds KeepWiz's records: people, bills, assets, policies, and the permanent history of actions.

What it sees: Your household's records, stored scrambled (encrypted) so they're unreadable without the keys, on servers in Sydney.
What it can never see: Your documents (those stay in your Drive) or your passwords (none exist anywhere in KeepWiz).
What this means for you: Your records stay in Australia, and every household is walled off from every other at the deepest level — so even a mistake in a screen couldn't show your records to another household.
What you should know: What you should know: any database can be broken into if its keys are stolen. Ours are rotated, the most powerful key never travels to your browser, and every sensitive action is permanently recorded — so anything unusual leaves a trail.

Claude — the AI assistantPowers the assistant: reads documents you snap, chats with you, and can run small web searches.

What it sees: Only when you use those features: the text of a snapped document, what you type or say to the assistant, and a compact summary of your records so it can answer questions.
What it can never see: Anything when you're not using the assistant. Never your passwords — none exist. Your data is not used to train AI models.
What this means for you: The assistant only ever drafts suggestions into your Review inbox — it cannot save a record by itself. You approve everything. Processing happens in the United States, which is disclosed in the privacy notice.
What you should know: What you should know: like any AI service, it could in theory be breached while processing text. That's why AI reading is something you trigger each time, why identity documents stay in your Drive, and why web lookups send only your question — never your records.

Vercel — serving KeepWizDelivers KeepWiz's pages to your screen over encrypted connections.

What it sees: Requests passing through, briefly — like the postal service seeing an envelope.
What it can never see: It keeps no copy of your content.
What this means for you: It keeps KeepWiz fast wherever you are, and lets security fixes reach every user within minutes of being ready.
What you should know: What you should know: no long-term data is stored at this layer — the important word is 'passing through'.

Documenso — e-signingSends documents for electronic signature (currently the beta agreement).

What it sees: The document being signed, and the signer's name and email.
What it can never see: Any household record — it's connected to nothing else.
What this means for you: Signing should be simple and produce a proper signed certificate, without giving the signing service any view into your records.
What you should know: What you should know: the only data ever at this provider is a document you intended to sign.

Resend — email notificationsSends KeepWiz's notification emails — for example, alerting the KeepWiz team when a support question needs a human.

What it sees: The recipient's email address and the notice text — which we keep deliberately empty of substance: "a support question needs you" and a link, never the question itself, never household data.
What it can never see: Any household record. It's a one-way outbox connected to nothing else.
What this means for you: So a support question never sits unseen, and invitations arrive promptly — without the email service learning anything private.
What you should know: What you should know: any email provider can read what passes through it — which is exactly why our notices carry no substance. The details stay behind your login.

Stripe — paymentsTakes payment if you subscribe, and stores the card so a renewal can be charged.

What it sees: Your name, email and billing details, and your card. The card details go straight from your browser to Stripe.
What it can never see: Your card number, which never touches KeepWiz, and no household record. Stripe is connected to nothing else.
What this means for you: Card handling belongs with a specialist that is built for it, so KeepWiz never holds a card number and cannot leak one.
What you should know: What you should know: we keep a customer reference and what plan you are on, which is how the app knows your subscription is active. The card itself lives at Stripe, not here.

Your device — voice, Face ID, fingerprint, and offline readingVoice chat, the locks on the Vault, your intentions and exports — and a saved copy of your household for reading when there's no internet.

What it sees: Everything — it's your device. Your phone's own security handles Face ID and fingerprints; voice is turned into text by the device itself. So you can read your KeepWiz on a plane or out of reception, the device also keeps a saved copy of your household records, refreshed whenever you're online.
What it can never see: — KeepWiz receives only the text of what you said, and a yes/no from the lock check. No recording and nothing biometric ever reaches us. There is nothing biometric on our side to leak. The saved copy never includes your intentions — those stay behind their own lock, online only — and never includes your documents' files, which stay in your own Drive.
What this means for you: The strongest lock available is the one already in your hand: a stolen photo or recording cannot pass your phone's Face ID. The saved copy shelters behind that same lock — your device's passcode, face or fingerprint.
What you should know: What you should know: a device someone else can unlock is a device that can open your KeepWiz — including the saved copy. Use a passcode; if you lose a device, remove its access in Settings. You can also remove the saved copy from any device yourself, any time, from the offline page — and signing out removes it automatically.

Referral partners — only when you askIf you ask KeepWiz for an introduction to a professional (a broker, lawyer, accountant), KeepWiz composes a one-off pack from the sections you tick. You hand it over yourself — KeepWiz doesn't send it to the partner, and never gives a partner your details so they can contact you. First contact is always yours to make.

What it sees: Only the sections you tick, once, after you've seen their name, their business, and — in plain words — whether KeepWiz is paid for the introduction.
What it can never see: Anything you don't tick. No standing feed, no list-selling, and a partner never gains access to your account. Introductions never happen unprompted, and no partner is told about you before you get in touch.
What this means for you: So your details don't need retyping at every professional's desk — you send exactly what's needed, when you choose.
What you should know: What you should know: once any professional holds your pack, it's governed by their obligations — true of any document you hand anyone. Every introduction is recorded permanently in your history, including exactly what was shared.

A linked practice — only if you link oneSome professionals provide KeepWiz to their clients. If you choose to link your household to their practice (with a code they give you), their name appears on your home screen and your export-pack covers — that’s all linking changes.

What it sees: Your household's name, whether it's active, and the packs you explicitly choose to send them — the one send KeepWiz performs, and only on your say-so, each time. Nothing else — ever.
What it can never see: Inside your household. No records, no amounts, no documents, no counts, no progress. Linking is recorded in your history and you can unlink any time in Settings — they see nothing new from that moment.
What this means for you: So a professional you already trust can provide KeepWiz without becoming its landlord. Your records stay yours, wherever the introduction came from.
What you should know: What you should know: packs you send a practice are governed by their obligations, same as any professional. The link never gives them a way into your account.

Spotted something we should explain better? Tell us: hello@keepwiz.com.