Your data is safe with us.

Locked before it leaves your device

When you save a document, photo or video message, your browser scrambles it before it ever touches our servers. The key is created right on your device from your private passphrase (never sent to us), so each item is sealed in a tamper-proof envelope only you can open.

Stored scrambled, not in plain text

Even at rest in our database, your sensitive details stay encrypted. Because your decryption key never leaves your browser, no one at Afterly can read your data while you're active and checking in. The titles and categories you see are the only things kept in plain text so your vault stays easy to browse.

A separate key for every vault

Each vault is unlocked by its own passphrase, which creates a unique encryption key right in your browser. A separate sealed key is also created so your trusted contacts can access your vault only after a verified release. One vault being compromised never puts anyone else's at risk.

Only you can open your vault

Your vault is locked with a separate passphrase that only you hold. It's turned into an encryption key right inside your browser and never sent to us, so no one at Afterly can read your documents, photos or video messages while you're active. You're only asked for it when you open your vault (not on every page). If you forget it, we can't reset it. Our team can help with account and billing questions, but we never see the contents you've stored.

You choose your trusted contacts

You hand-pick who can step in and what categories they're allowed to see. Nothing is shared until you say so, and only after the safety checks you set up are met.

A release you control

Before anything is shared, there's a waiting period (7 days if you miss a check-in, 21 days if a contact triggers it) and a final 72-hour chance for you to cancel. You can pause or cancel a release at any time, for any reason. Once the full cycle completes, your authorized contacts receive the decrypted contents for their categories.

No selling, no advertising

We never sell your data to third parties or use it to show you ads. Your vault exists to serve you and the people you trust, full stop.

You start it, and you can stop it

Open “Delete my vault” in your profile settings to begin. It starts a 24-hour cooldown so you can change your mind. Cancel any time before it ends and nothing is touched.

You finish it with a final click

When the 24 hours are up, a button appears for you to permanently erase your vault. Nothing is deleted automatically. You stay in control the whole way, and you confirm one last time before anything is gone.

What gets erased for good

On your final confirmation, your vault entries, trusted contacts and check-in settings are permanently deleted from our database. No hidden copies, no soft delete. It's gone for real.

What we keep, and why

We retain only the bare minimum required for billing records and legal compliance (like invoice amounts) and nothing that reveals what you stored.