Privacy Policy — The Goodbye Vault

Last updated: October 2026 · Applies to thegoodbyevault.com, thenominee.org, and "The Goodbye Vault" mobile applications (Android & iOS).

1. What this service is

The Goodbye Vault is an encrypted digital-legacy vault. You store secrets; if you stop checking in, they are delivered to nominees you chose. It is operated as part of the Nominee ecosystem ("we", "us").

2. What we collect and process

• Account data: Your email address and a one-way password hash. Your password is never stored in readable form.
• Encrypted records: The ciphertext of your secrets, plus wrapped (encrypted) keys. We cannot read these. They are encrypted on your device before reaching us.
• Nominee data: Names, email addresses, and notes of the people or organisations you designate, so we can deliver records to them.
• Check-in metadata: Timestamps of your logins and activity, used to run the reminder and release schedule.
• Subscriptions & Purchases: We use RevenueCat to manage in-app subscriptions and payment processing via Apple App Store and Google Play Store. We share an App User ID with RevenueCat solely to verify and manage your subscription entitlement. No payment credentials or vault secrets are shared with RevenueCat.
• Push Notification Tokens: We use Firebase Cloud Messaging (FCM) to send push notification check-in reminders to your device. FCM processes device push tokens for notification delivery.
• Local Device Storage: We use secure local storage (encrypted platform keychains) on your device to persist authentication tokens and configuration preferences locally.
• Operational logs: Standard server logs (IP address, timestamps) kept for security and abuse prevention.

3. What we never have

• Your master password or the encryption keys derived from it.
• Plaintext content of any record you store.
• Plaintext delivery tokens (only one-way hashes and an encrypted form requiring a separately stored server release key).
• Your financial/credit card details (handled directly by Apple/Google).

4. How we use data and third-party services

We process your data for the following purposes:

• To operate the vault: Authentication, storage of encrypted records, nominee management.
• To send reminders: Email reminders and local/push notifications (via FCM) when you miss a check-in.
• To handle subscriptions: Processing purchase receipts and entitlements via RevenueCat.
• To complete delivery: Sending release emails with secure delivery links to your nominees if you stop responding through the grace period.

We do not sell, rent, or share personal data with advertisers or data brokers. Ever.

5. Legal basis (GDPR)

Processing is based on contract performance (Art. 6(1)(b) GDPR) for operating your vault and subscriptions, and on legitimate interest (Art. 6(1)(f)) for security logging and notification delivery. Nominee data is processed to fulfill your instructions as the data controller of your records.

6. Data Retention

• Account, record, and subscription data: Kept while your account is active; deleted on account deletion.
• Delivery packages: Kept until released and accessed, or deleted when you delete the record or nominee.
• Server logs: Rotated regularly, retained no longer than 90 days.

7. Security measures

End-to-end encryption: AES-256-GCM for records; PBKDF2-HMAC-SHA256 key derivation (210,000 iterations) on your device. Local credentials are stored in secure OS-level storage (Keychain / KeyStore). TLS is enforced in transit; decryption for nominees happens in their browser, not on our servers.

8. Your rights

You may access, correct, export, or delete your data at any time via the app or by contacting us. Deleting your account removes your records, nominee links, and sessions. Because records are encrypted with your password, deletion is absolute — we hold no recovery copy.

9. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

10. Changes

We will announce material changes to this policy by email to registered users before they take effect.

11. Contact

Privacy questions: privacy@thenominee.org