Privacy policy · Almirah

Almirah is built so that we can't read your documents. This policy explains what that means in practice: what we can see, what we can't, who helps us run the service, and the rights you have.

Almirah is run from Brisbane, Australia. Questions or requests: privacy@getalmirah.app.

What we can't see

Your documents are encrypted on your phone before they are uploaded, with keys that only you and the family members you invite hold. We never receive:

your documents, scans or photos
document details such as titles, document numbers, holders and notes
your vault names
your passphrase, recovery key or any of your encryption keys

Because we don't have these, we can't show them to anyone, including in response to a breach, a staff member, or a legal demand. It also means we can't recover your vault if you lose your passphrase and recovery key.

What we do collect

To run the service we store the minimum we need, in plain form:

Account: your email address and time zone, and the public halves of your encryption keys.
Sign-in: one-time sign-in codes (deleted after use or expiry) and session tokens for each device.
Devices: platform (iOS or Android), app version, last seen time and, if you allow notifications, a push token.
Family vaults: who belongs to which vault and their role, invites you send (including the invitee's email address).
Storage: the size and number of your encrypted files, so we can enforce storage limits.
Reminders, only if you choose server reminders: the document type and its due date, so we can notify you even if the app is closed. Local-only reminders keep these on your phone.
Subscriptions: your plan, its status and renewal date. Payments are handled by Apple or Google; we never see your card details.
Server logs: IP addresses and request times, kept briefly for security and troubleshooting. We don't log request contents on encrypted endpoints.

We don't use advertising, sell data, or build profiles. This website loads no third-party scripts, fonts or trackers.

How we use it

to sign you in and keep your account secure
to let your family share a vault
to send sign-in codes, invites and the reminders you ask for
to apply your plan and storage limit
to answer you when you contact us

Who helps us run Almirah

We use a small number of service providers. Each only receives what it needs:

Fly.io: hosts our servers in Singapore.
DigitalOcean: hosts our database in Singapore.
Cloudflare R2: stores your encrypted files. Cloudflare can't read them.
Resend: delivers sign-in and invite emails (your email address and the message).
RevenueCat, Apple and Google: process in-app subscriptions.
Apple Push Notification service and Firebase Cloud Messaging: deliver notifications to your phone.
Sentry: receives error reports from the app and our servers (the error, where in our code it happened, and app, device and operating system versions), with email addresses and identifiers removed. Never your documents or account details.
Expo: counts app launches and measures app speed and crashes (app version, device model, operating system, network type and an anonymous install ID) so we know which versions are in use and what to fix. Never your documents or account details.

Some of these providers are based in, or process data in, the United States and other countries. Your documents leave your phone only in encrypted form wherever they are stored.

Keeping and deleting data

Documents you delete are kept for 30 days so you can restore them, then permanently removed.
When you delete your account we delete your account data and the encrypted files in vaults you own. Backups roll over within 30 days.
Copies a family member already downloaded stay on their device.

To delete your account, see Support.

Your rights

You can ask to access, correct or delete the personal information we hold about you, or ask how it is handled. Email privacy@getalmirah.app and we'll reply within 30 days.

If you're in Australia, we handle personal information under the Privacy Act 1988 and the Australian Privacy Principles. If you're not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If you're in India, you have rights under the Digital Personal Data Protection Act 2023. Our grievance contact is privacy@getalmirah.app.

Children

A parent can add a child to a family vault as a managed member. Almirah isn't designed for children to sign up on their own.

Changes

If we change this policy we'll update the date above, and tell you in the app or by email before any significant change takes effect.