Privacy Policy

1. Summary for Users

We've written this Privacy Policy in plain English to help you understand how we protect your information.

• Your data is yours. We never sell or share your information for advertising. Everything you store with us stays encrypted and private.

• Service Purpose: We use your data only to provide the service. We securely store your information and, if you become inactive, deliver a Data Package to your nominated person(s) as you've configured.

• You stay in control. You can update, export, or delete your data at any time. We retain it only as long as necessary — normally up to 12 months after nominee notification or account closure.

2. Introduction

SuccessionKeeper Ltd ("we," "our," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our application, website, and related services (the "Service").

SuccessionKeeper allows users to securely store financial account details and nominate trusted individuals ("Nominees") to receive a Data Package of that information if the user becomes inactive or unresponsive.

We are the "data controller" for information you provide directly to us.

3. Information We Collect

We collect and process the following types of personal data:

Account Information

Name, email address, country, and account-related information.

Billing Information

We don't store credit/debit card details — they are processed by a third party.

Optional Demographic Information

Such as marriage status, number of kids and ages, education, sex, and race.

Vault Information (User-entered data)

Financial account summaries (e.g., account type, account number, provider name, value, currency, and location), contact details of nominated individuals (Primary Nominee and Nominees), notes, and metadata. This information is protected by infrastructure-level encryption at rest and strict internal access controls.

Device and Usage Data

Device type, operating system, browser type, app version, IP address, location, timestamps, log data, and app actions, including analytics from tools such as Google Analytics.

Communication Data

Emails, messages, or support requests sent to our team, as well as marketing preferences and consent history.

4. How We Use Your Data

We process your personal data based on the following:

• To Provide the Service: Maintain your account, securely store information, and facilitate the Check-In process.

• Nominee Delivery: Facilitate the notification of the Primary Nominee and the subsequent delivery of the Data Package to all Nominees if inactivity is confirmed.

• Operations: Manage subscriptions and respond to support requests.

• Improvement: Improve performance and security through analytics and diagnostics.

• Compliance: Comply with legal obligations such as fraud prevention and tax compliance.

5. Sharing Your Data

We only share personal data when necessary. We never sell or rent your personal data to advertisers.

Service Providers

For hosting (Google Cloud UK), payment processing, and email delivery.

Analytics Partners

Such as Google Analytics, to understand aggregate usage trends (no sensitive vault data is shared).

Nominees

As explicitly authorised by you through your Check-In Settings.

Google Accounts

If you authorize SuccessionKeeper to use your Google account to login, your name, contact info, and basic details (profile picture, age, gender, birthday) may be shared with us. We may use this to improve services (e.g., identifying email spelling errors).

SMS Information

No SMS mobile information will be shared with third parties for marketing purposes. This includes your text messaging originator opt-in data and consent.

6. Data Protection & Global Privacy

While SuccessionKeeper Ltd is a UK entity, we aim to respect privacy rights globally, including compliance with:

• UK GDPR and EU GDPR (Europe/UK)

• The Privacy Act 1988 (Australia)

• PIPEDA (Canada)

• LGPD (Brazil)

• Applicable US State Privacy Laws (e.g., CCPA/CPRA)

International Data Transfers: By using the Service, you acknowledge that your data will be stored on UK-based servers. For users in jurisdictions requiring explicit consent for cross-border transfer (such as Brazil and Russia), you expressly consent to the transfer of your data to the United Kingdom.

7. Data Retention

• Active Users: Data is retained for the life of the account.

• Account Closure: Following closure, backups and logs may be retained for up to 90 days for disaster recovery and legal compliance.

• Post-Release: Where a Data Package has been released to Nominees, data will be retained for up to twelve (12) months to ensure download integrity, then permanently deleted or anonymised.

8. Accuracy of Information and User Responsibility

You are solely responsible for ensuring that all personal data and vault information you provide to SuccessionKeeper — including your own account details, the contact information of your Primary Nominee, and the details of all other Nominees — is complete, accurate, and up to date.

SuccessionKeeper Ltd does not verify the accuracy or currency of user-entered data. We are not responsible or liable for any loss, delay, or failure of the Service (including the failure to deliver a Data Package) that results from:

• The inclusion of incomplete, incorrect, or outdated information;

• Your failure to update such information when changes occur; or

• Any actions or decisions made by Nominees or third parties relying on inaccurate information provided by you.

9. Security and AI Protection

Your data security is our top priority.

Technical Measures

Data at rest is protected by Google Cloud's AES-256 encryption; data in transit is secured with TLS 1.3.

AI Shield

All content within user vaults and the SuccessionKeeper App is strictly blocked from AI crawlers and search engine robots to ensure your private legacy data is never indexed.

Breach Notification

If a security incident occurs, we will notify the ICO within 72 hours where required and notify affected users as soon as practicable.

10. Legal Bases for Processing

We process data only when a valid legal basis applies:

• Consent: When you authorize us to access account information. You may withdraw consent at any time.

• Contractual Necessity: Required to provide the services you request (e.g., creating your account).

• Legal Obligations: Necessary to comply with regulatory requirements like anti-money laundering.

• Legitimate Interests: To maintain the security and integrity of our services, provided these are not overridden by your rights.

11. Legal Matters & Business Transfers

Legal Disclosure

We will disclose personal information if required by law to respond to subpoenas, court orders, or bona-fide legal processes, or to investigate violations of our Terms of Service or suspected fraud.

Business Transfer

If SuccessionKeeper Ltd is acquired or merged, user information may be included in the transferred assets. The acquiring party will assume the rights and obligations described in this policy.

12. Your Rights

Under the UK GDPR, you have the right to access your data, correct inaccuracies, request deletion ("right to be forgotten"), restrict processing, and request a copy of your data in portable form.

Requests should be sent to support@successionkeeper.com.

Final Legal Release — February 2026 (Privacy Policy)