What we hold, and what we never will

What we store

The organized details of your household — what exists, where it is, who to contact, and what needs attention. Things like the name of your bank, a loan's payoff date, where your title is kept, who your advisor is, and the notes and instructions you choose to write. That's the whole point: a clear, current picture you and your family can rely on.

What we never store

Your passwords. Your full Social Security numbers. Your full bank or card numbers. Private keys or seed phrases. We're built so these literally have nowhere to go — there is no field anywhere in Family Ledger that can hold one. Instead of a password, we record where it lives (“1Password › Chase”). The most we'll ever keep of an account number is the last four digits. This isn't a setting you turn on; it's how the product is built.

How your data is protected

Your connection to Family Ledger is encrypted (HTTPS), and your ledger is encrypted at rest by our database host (the standard disk-level encryption). Your account is yours alone — there are no shared logins, and only you can sign in to see your ledger.

We'll be straight with you about the limits, too: today Family Ledger can read your ledger in order to do its job — power your dashboard, send reminders, and build your handoff plan. We do not yet offer “zero-knowledge” encryption where even we couldn't read it. The strongest protection we give you is the one above: because we never hold your passwords, SSNs, or full account numbers, the most dangerous secrets simply aren't here to lose.

Never sold, never targeted

We never sell your information, and we never use what you enter as an advertising-targeting database. The facts of your life — your debts, your insurance, your children, your plans — are never a product we sell or a signal we target you with. Your ledger is yours.

Ads and referrals

There are no ads in Family Ledger today, and no referral marketplace. We don't run third-party advertising trackers on your ledger.

If we ever add helpful, clearly-labeled suggestions or a referral directory, we've already committed to the rules: anything sponsored will be plainly labeled, partners never receive your entered data unless you choose to send it, you can always ignore them, and the grief-sensitive survivor experience stays free of them. We'll update this page before anything like that ships.

Deleting your data

You can delete any individual entry, section, or contact at any time from your ledger. You can also export everything — your complete ledger as a single file — whenever you want, from the Your datapage in your account. It's your information; you can take it with you.

If you want to close your account, you can do that too. We ask you to confirm, then we delete your account and everything in it. In plain terms: it disappears from the live service right away. Routine encrypted backups, which exist so we can recover from a disaster, age out on a rolling schedule rather than the instant you click — we'd rather tell you that honestly than pretend otherwise.

How trusted access works

Family Ledger has one account: yours. We don't create logins for your spouse or family, and we never act on your behalf — we will not log into anything, impersonate you, or release access to anyone. The handoff plan you build is information and instructions, not authority.

What we help you do is write down, in your own words, how a trusted person would reach what they need — and choose an approach that fits you, whether that's sharing now, a sealed envelope in a home safe, a password manager's emergency-access feature, or the built-in legacy tools from companies like Apple and Google. Because we never store the secret itself, you stay in control. Your handoff plan is private by default, and is shared only if and when you choose.

What Family Ledger is and is not

Family Ledger is a guided way to organize your household's important details and prepare a clear plan for your family. That — and keeping it current — is what it's for.

It is not a vault: we don't store your files or documents, only notes about where they live. It is not a password manager. And it is not a lawyer, financial advisor, CPA, insurance advisor, or estate planner. For legal, tax, insurance, and investment decisions, please work with qualified professionals — Family Ledger helps you stay organized for those conversations, not replace them.