Privacy Policy

Your account details (email address, and a display name if you give one), your planning preferences from onboarding, your Legacy Hub answers, your journal entries, the trusted contacts you enter, and which chapters you have marked as read. All of it is stored in your account so that it is there when you come back.

We do not read what you write. Your Hub answers, journal entries, and contact details are yours. They are locked to your account, they are not reviewed by us, and they are not shown to anyone else. The only way any of it becomes visible to us is if you choose to create an access link and send it to us — for example, if you ask for help with something specific. Even then, we see only what that link includes, and you can turn it off at any time.

We do not sell your information, and we do not use what you write to advertise to you.

One honest caveat: like any hosted service, the people who maintain the system have technical access to the database it runs on. We do not look at your entries, and we would only ever touch stored data to keep the service working or if the law required it. No online service can promise otherwise — anyone who tells you differently is overstating it.

This is the one place where your information can become visible to another person, so it is worth being precise.

• Nothing is shared unless you create a link. Adding someone as a trusted contact does not give them access on its own. Access exists only when you generate an access link for them.
• A link is a secret address. Anyone holding the link can open the shared view — there is no separate password and no identity check. Treat it like a key. Send it only through a channel you trust, and understand that if it is forwarded, the recipient can open it too.
• Only what you have marked is shown. The shared view includes Hub answers you have left visible to contacts, and journal entries you have explicitly marked to pass on. Everything else — including every private journal entry — is not included.
• It is read-only. A person opening your link can read and copy what is shown. They cannot edit, delete, or add anything, and they cannot sign in to your account.
• You stay in control. You can turn a link off or set an expiry date at any time, and we record when a link was last opened so you can see whether it has been used.
• We do not decide when it opens. There is no automatic release on death or incapacity. A link works because you created it and left it active — nothing here triggers on its own.
• Once read, it cannot be unread. Turning off a link stops future access. It cannot recall information someone has already seen, saved, or shared onward.

Shared pages are marked so search engines do not index them, but a link is only as private as the people who hold it.

When you record a trusted contact's name, relationship, email address, or phone number, you are giving us information about someone else. Please enter only what you reasonably need, and let that person know they are listed and what they may one day be able to see.

Your data is stored in a hosted database and is protected by per-account access rules, so your records are reachable only by your signed-in account — with the single exception of the access links you create. Traffic to and from the app is encrypted in transit.

You can export everything you have written from Settings at any time. You can also delete your account from Settings, which removes your profile, Hub answers, journal entries, trusted contacts, and access links. Deletion is permanent, and active links stop working immediately.

We send account and invitation email — for example, the invitation that brought you here. Those messages are delivered through an email provider acting on our behalf.

This app is intended for adults and is not directed to children.

If this policy changes in a way that affects how sharing works, we will update the date at the top of this page. Questions about your information, or a request to delete it, can go to info@aftermathparadox.com.