How we handle your data

What we cannot see

Passwords, notes, cards, codes and files you save in your vault are locked on your own device with your master password before they reach us. We store only the locked version and cannot read it. The same applies to items you share and to the unlock codes passed between people.

What we do keep

• Your name, email address and, if you add it, phone number.
• Your plan and payment status. Card payments are handled by our payment provider; we never see your full card number.
• A record of account activity, such as sign-ins, shares and helper access, so you can see what happened in your account.
• Basic technical details, such as the device and browser used to sign in, to keep your account safe.

Parents and the carers who help them

When a parent chooses someone as a helper, we keep the helper's name and email, which logins they may use, and for how long. The helper gets a "Sign in" button but never the password itself. Sign-in codes passed to a helper are locked so only that helper can read them.

The parent stays in charge: they can stop a helper's access at any time and see every time it was used. Helpers can see only what the parent has chosen to share with them.

Trusted contacts you add for account recovery are stored with their name and email so we can contact them if you ask for help getting back in.

Why we use your data

To run your account, send you emails you need (such as sign-in codes and share alerts), take payment, keep the service secure, and meet our legal duties. We do not sell your data or use it for advertising.

How long we keep it

We keep your data while your account is open. After you close your account, we keep it for 90 days so it can be restored if it was closed by mistake, then delete it — except anything the law requires us to keep for longer.

Your rights

You can ask to see, correct or delete your personal data, or object to how we use it. Email support@secretdigits.com. If you're unhappy with our answer, you can complain to the ICO at ico.org.uk.